Search for packages
| purl | pkg:deb/debian/mojarra@2.2.8-1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-1rtf-aum8-33hg | Mojarra: deployed web applications can read FacesContext from other applications under certain conditions |
CVE-2012-2672
|
| VCID-s1tt-jj2t-5yc9 | XSS due to insufficient escaping of user-supplied content in outputText tags and EL expressions This package does not perform appropriate encoding when a `<h:outputText>` tag or EL expression is used after a scriptor style block, which allows remote attackers to conduct cross-site scripting (XSS) attacks via application-specific vectors. |
CVE-2013-5855
GHSA-3m3r-82gc-53mj |
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-04-16T12:52:54.919691+00:00 | Debian Importer | Fixing | VCID-1rtf-aum8-33hg | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-16T11:29:20.783113+00:00 | Debian Importer | Fixing | VCID-s1tt-jj2t-5yc9 | https://security-tracker.debian.org/tracker/data/json | 38.4.0 |
| 2026-04-13T08:50:34.688553+00:00 | Debian Importer | Fixing | VCID-1rtf-aum8-33hg | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-13T07:49:44.718548+00:00 | Debian Importer | Fixing | VCID-s1tt-jj2t-5yc9 | https://security-tracker.debian.org/tracker/data/json | 38.3.0 |
| 2026-04-03T07:46:04.008125+00:00 | Debian Importer | Fixing | VCID-s1tt-jj2t-5yc9 | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |
| 2026-04-03T07:46:03.983474+00:00 | Debian Importer | Fixing | VCID-1rtf-aum8-33hg | https://security-tracker.debian.org/tracker/data/json | 38.1.0 |