Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.cxf/cxf-core@4.1.7
purl pkg:maven/org.apache.cxf/cxf-core@4.1.7
This package is not known to be subject of any advisories.
Vulnerabilities fixed by this package (2)

Advisory Summary Aliases
GHSA-ghvc-7hp8-2g2v
Apache cxf-core: No restriction on attachment headers per message There is no restriction on the amount of attachment headers that … CVE-2026-50645
GHSA-xw5h-cmh3-8j6j
Apache CXF has Improper Restriction of XML External Entity Reference Apache CXF's EndpointReferenceUtils and W3CMultiSchemaFactory classes construct a SAXParserFactory without … CVE-2026-49875