maven package report

Is org.apache.jspwiki:jspwiki-main safe?

17 known vulnerabilities, worst severity CRITICAL.

cvss

9.0

how bad it is if exploited, out of 10

epss

6.4%

chance of exploitation in the next 30 days

xyz score

4.2

CyberXYZ composite, out of 10

fig. 01 — GHSA-8gw6-w5rw-4g5c, the advisory selected below

// advisories

GHSA-8gw6-w5rw-4g5c

CRITICALCVE-2021-44140

Remote attackers may delete arbitrary files in a system hosting a JSPWiki instance, versions up to 2.11.0.M8, by using a carefuly crafted http request on logout, given that those files are reachable to the user running the JSPWiki instance. Apache JSPWiki users should upgrade to 2.11.0 or later.

Affected: < 2.11.0
Fixed in: 2.11.0
Weakness: CWE-276
Published: 2021-11-29
Source: github

GHSA NVD MITRE reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 01:50 UTC. The most recent advisory here was published 2025-07-31. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.apache.jspwiki:jspwiki-main safe? maven package security report | CyberXYZ