Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.dspace:dspace-api
Maven
· Package
8 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
DSpace: Path Traversal is possible through LDN message generation
CVE-2026-49833 · GHSA-9QM4-RH6W-PQ5X
org.dspace:dspace-api
Maven
Medium
Fix reported
2026-07-09
DSpace: ORE resource URI does not validate scheme for non-web resources
CVE-2026-49830 · GHSA-C827-PW3M-67W7
org.dspace:dspace-api
Maven
Medium
Fix reported
2026-07-09
DSpace has a possible Path Traversal Vulnerability in its Curation Task Reporter output path
CVE-2026-49831 · GHSA-V66X-68F2-PXF5
org.dspace:dspace-api
Maven
Medium
Fix reported
2026-07-09
DSpace has possible Remote Code Execution (RCE) through Velocity Templates used by LDN
CVE-2026-49832 · GHSA-9X82-RM84-C6X7
org.dspace:dspace-api
Maven
High
Fix reported
2026-07-09
Communities and collections administrators can escalate their privilege up to system administrator
CVE-2021-41189 · GHSA-CF2J-VF36-C6W8
org.dspace:dspace-api
Maven
High
Fix reported
2026-07-08
DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format
CVE-2025-53622 · GHSA-VHVX-8XGC-99WF
org.dspace:dspace-api
Maven
Medium
Fix reported
2025-07-15
DSpace is vulnerable to XML External Entity injection during archive imports
CVE-2025-53621 · GHSA-JJWR-5CFH-7XWH
org.dspace:dspace-api
Maven
Medium
Fix reported
2025-07-15
DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
CVE-2022-31195 · GHSA-8RMH-55H4-93H5
org.dspace:dspace-api
Maven
High
Fix reported
2023-11-08
