Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.asset.taglib@4.0.8
purl pkg:maven/com.liferay/com.liferay.asset.taglib@4.0.8
Next non-vulnerable version 6.1.9
Latest non-vulnerable version 6.1.9
Risk score 2.8
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-q2rp-xfj8-r95h
Aliases:
CVE-2022-26593
Liferay Portal and Liferay DXP allows arbitrary injection via the name of an asset category Cross-site scripting (XSS) vulnerability in …
6.1.0
Vulnerable
GHSA-wffm-j7m8-93g4
Aliases:
CVE-2022-28982
Liferay Portal and Liferay DXP Vulnerable to XSS via Tag Name A cross-site scripting (XSS) vulnerability in Liferay Asset Taglib …
6.1.9
Not vulnerable
This package is not known to fix any advisories.