maven package report

Is org.xwiki.platform:xwiki-platform-refactoring-default safe?

1 known vulnerability, worst severity HIGH.

cvss

8.5

how bad it is if exploited, out of 10

epss

0.50%

chance of exploitation in the next 30 days

xyz score

3.3

CyberXYZ composite, out of 10

fig. 01 — GHSA-jm43-hrq7-r7w6, the advisory selected below

// advisories

GHSA-jm43-hrq7-r7w6

HIGHCVE-2025-49580

Pages can gain script or programming rights when they contain a link and the target of the link is renamed or moved. This might lead to execution of scripts contained in xobjects that should have never been executed.

Affected: >= 7.4.5, < 8.0-milestone-1, >= 8.2, < 16.4.7, >= 16.5.0-rc-1, < 16.10.4, >= 17.0.0-rc-1, < 17.1.0-rc-1
Fixed in: 16.4.7
Weakness: CWE-266
Published: 2025-06-13
Source: github

GHSA NVD MITRE reference reference reference

// dependencies

0 direct

// ai model usage

Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.

Checked 2026-09-22 at 02:59 UTC. The most recent advisory here was published 2025-06-13. Updated continuously from NVD, GHSA, OSV and CNA feeds.

Is org.xwiki.platform:xwiki-platform-refactoring-default safe? maven package security report | CyberXYZ