Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.dynamic.data.mapping.form.field.type@4.0.2
purl pkg:maven/com.liferay/com.liferay.dynamic.data.mapping.form.field.type@4.0.2
Next non-vulnerable version 6.0.187
Latest non-vulnerable version 6.0.187
Risk score 2.8
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
GHSA-84pp-qr92-95c9
Aliases:
CVE-2025-43762
Liferay Portal users can upload an unlimited amount of files Liferay Portal 7.4.0 through 7.4.3.132, and Liferay DXP 2025.Q1.0 through …
6.0.187
Not vulnerable
GHSA-jfv5-r382-xvwh
Aliases:
CVE-2025-43800
Liferay Portal Cross-site Scripting (XSS) vulnerability Cross-site scripting (XSS) vulnerability in Objects in Liferay Portal 7.4.3.20 through 7.4.3.111, and Liferay …
6.0.167
Vulnerable
GHSA-5c6v-fqcw-w6q5
Aliases:
CVE-2025-43791
Liferay Portal vulnerable to Cross-site Scripting Multiple cross-site scripting (XSS) vulnerabilities in Liferay Portal 7.3.0 through 7.4.3.111, and Liferay DXP …
6.0.167
Vulnerable
GHSA-658f-xhv4-p978
Aliases:
CVE-2022-26594
Liferay Portal and Liferay DXP allows arbitrary injection via form field Multiple cross-site scripting (XSS) vulnerabilities in Dynamic Data Mapping …
6.0.11
Vulnerable
This package is not known to fix any advisories.