Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/com.liferay/com.liferay.frontend.js.web@5.0.0
purl pkg:maven/com.liferay/com.liferay.frontend.js.web@5.0.0
Next non-vulnerable version 5.0.125
Latest non-vulnerable version 5.0.125
Risk score 2.4
Vulnerabilities affecting this package (1)
Advisory Summary Fixed in package version
GHSA-mm62-gwj5-j285
Aliases:
CVE-2025-43758
Liferay Portal's unauthenticated users can access loaded files via URL before submitting the object entry Liferay Portal 7.4.0 through 7.4.3.132, …
5.0.125
Not vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
GHSA-r39x-3qq4-gxmr
Liferay Portal and Liferay DXP vulnerable to cross-site scripting (XSS) in edit blog entry page Cross-site scripting (XSS) vulnerability in … CVE-2021-38267