org.xwiki.commons:xwiki-commons-velocity
Maven · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| XWiki Commons missing escaping of `{` in Velocity escapetool allows remote code execution | org.xwiki.commons:xwiki-commons-velocity | Maven | Critical | Fix reported | |
| Arbitrary filesystem write access from velocity. | org.xwiki.commons:xwiki-commons-velocity | Maven | High | Fix reported |