Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.frontend.js.web@2.0.3
purl pkg:maven/com.liferay/com.liferay.frontend.js.web@2.0.3
Next non-vulnerable version 5.0.125
Latest non-vulnerable version 5.0.125
Risk score 2.5
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-mm62-gwj5-j285
Aliases:
CVE-2025-43758
Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry Liferay Portal 7.4.0 through 7.4.3.132, …
5.0.125
Not vulnerable
GHSA-r39x-3qq4-gxmr
Aliases:
CVE-2021-38267
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page Cross-site scripting (XSS) vulnerability in …
5.0.0
Vulnerable
This package is not known to fix any advisories.