Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.sun.faces/jsf-api@2.0.4-b10
purl pkg:maven/com.sun.faces/jsf-api@2.0.4-b10
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-kfr5-vfjf-xbc7 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Cross-site scripting (XSS) vulnerability in Sun Java Server Faces (JSF) 1.2 before 1.2_08 allows remote attackers to inject arbitrary web script or HTML via unknown vectors. CVE-2008-1285
GHSA-vv6j-5x58-q2c3

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T21:46:05.143361+00:00 GitLab Importer Fixing VCID-kfr5-vfjf-xbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.sun.faces/jsf-api/CVE-2008-1285.yml 38.4.0
2026-04-11T23:01:51.070404+00:00 GitLab Importer Fixing VCID-kfr5-vfjf-xbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.sun.faces/jsf-api/CVE-2008-1285.yml 38.3.0
2026-04-02T23:10:19.157344+00:00 GitLab Importer Fixing VCID-kfr5-vfjf-xbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.sun.faces/jsf-api/CVE-2008-1285.yml 38.1.0
2026-04-01T17:30:05.876622+00:00 GitLab Importer Fixing VCID-kfr5-vfjf-xbc7 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/com.sun.faces/jsf-api/CVE-2008-1285.yml 38.0.0