What’s Vulnerable › Products

Apache Software Foundation Apache Helix vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Helix version is affected

Latest Apache Software Foundation Apache Helix vulnerabilities

• CVE-2026-57111 — Apache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-Origin (CVSS 7.5)
• CVE-2024-22281 — Apache Helix Front (UI): Helix front hard-coded secret in the express-session (CVSS 7.5)
• CVE-2023-38647 — Apache Helix: Deserialization vulnerability in Helix workflow and REST (CVSS 9.8)
• CVE-2022-47500 — Apache Helix: Open redirect (CVSS 6.1)