VulnerableCode Package Details - pkg:maven/org.apache.cxf/cxf-api@2.6-alpha0

Search for packages

Package details: pkg:maven/org.apache.cxf/cxf-api@2.6-alpha0

Essentials
History (1)

purl	pkg:maven/org.apache.cxf/cxf-api@2.6-alpha0
Tags	Ghost

Next non-vulnerable version	None.
Latest non-vulnerable version	None.
Risk	10.0

Vulnerabilities affecting this package (1)

Vulnerability	Summary	Fixed by
VCID-kahc-rzzq-c7ev Aliases: CVE-2013-2160 GHSA-254q-rp36-v2m8	Missing XML Validation in Apache CXF The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors.	2.6.7 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }} 2.7.4 Affected by 2 other vulnerabilities. This version is affected by these other vulnerabilities: {{ fixed_by_vuln.vulnerability_id }} {{ fixed_by_vuln.vulnerability_id }}

Vulnerability

Summary

Fixed by

VCID-kahc-rzzq-c7ev
Aliases:
CVE-2013-2160
GHSA-254q-rp36-v2m8

Missing XML Validation in Apache CXF The streaming XML parser in Apache CXF 2.5.x before 2.5.10, 2.6.x before 2.6.7, and 2.7.x before 2.7.4 allows remote attackers to cause a denial of service (CPU and memory consumption) via crafted XML with a large number of (1) elements, (2) attributes, (3) nested constructs, and possibly other vectors.

2.6.7
Affected by 2 other vulnerabilities.

2.7.4
Affected by 2 other vulnerabilities.

Vulnerabilities fixed by this package (0)

Vulnerability	Summary	Aliases
This package is not known to fix vulnerabilities.

Date	Actor	Action	Vulnerability	Source	VulnerableCode Version
2025-07-31T09:21:02.863240+00:00	GitLab Importer	Affected by	VCID-kahc-rzzq-c7ev	https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.cxf/cxf-api/CVE-2013-2160.yml	37.0.0