maven package report

Is net.mingsoft:ms-mcms safe?

34 known vulnerabilities, worst severity CRITICAL.

cvss

9.8

how bad it is if exploited, out of 10

epss

0.60%

chance of exploitation in the next 30 days

xyz score

4.0

CyberXYZ composite, out of 10

fig. 01 — GHSA-54wc-49qj-5ghj, the advisory selected below

// advisories

GHSA-54wc-49qj-5ghj

CRITICALCVE-2025-56316

A SQL injection vulnerability in the contenttitle parameter of the /cms/content/list endpoint in MCMS 5.5.0 through 6.0.1 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering.

Affected: >= 5.5.0, < 6.0.2
Fixed in: 6.0.2
Weakness: CWE-89
Published: 2025-10-17
Source: github

GHSA NVD MITRE reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 00:47 UTC. The most recent advisory here was published 2026-02-18. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is net.mingsoft:ms-mcms safe? maven package security report | CyberXYZ