Search for packages
| purl | pkg:maven/org.eclipse.ee4j/project@2.0.3 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-zmkc-fhsk-yqhd
Aliases: CVE-2021-28170 GHSA-v6w3-2prq-h95f |
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid. | There are no reported fixed by versions. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||
| Date | Actor | Action | Vulnerability | Source | VulnerableCode Version |
|---|---|---|---|---|---|
| 2026-06-12T17:41:54.384587+00:00 | GitLab Importer | Affected by | VCID-zmkc-fhsk-yqhd | https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.eclipse.ee4j/project/CVE-2021-28170.yml | 38.6.0 |