maven package report

Is nl.nl-portal:taak safe?

1 known vulnerability, worst severity HIGH.

cvss

8.1

how bad it is if exploited, out of 10

epss

0.20%

chance of exploitation in the next 30 days

xyz score

3.3

CyberXYZ composite, out of 10

fig. 01 — GHSA-6h3c-r723-7fx3, the advisory selected below

// advisories

GHSA-6h3c-r723-7fx3

HIGHCVE-2026-49464

In versions from 1.5.0 up to and including 3.0.0, any authenticated portal user could complete and tamper with another user's open task by submitting it on their behalf. The task submission endpoint accepted a task ID and a payload, but it never checked whether the task actually belonged to the user making the call.

Affected: >= 1.5.0, <= 3.0.0
Fixed in: 3.0.1
Weakness: CWE-639
Published: 2026-07-08
Source: github

GHSA NVD MITRE reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 01:56 UTC. The most recent advisory here was published 2026-07-08. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is nl.nl-portal:taak safe? maven package security report | CyberXYZ