What’s Vulnerable › Products

Apache Software Foundation Apache Ivy vulnerabilities

4 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Ivy version is affected

Latest Apache Software Foundation Apache Ivy vulnerabilities

• CVE-2026-26032 — Apache Ivy: PackagerResolver path traversal vulnerability (CVSS 5.4)
• CVE-2022-46751 — Apache Ivy: XML External Entity vulnerability in Apache Ivy (CVSS 8.2)
• CVE-2022-37866 — Apache Ivy allows path traversal in the presence of a malicious repository (CVSS 7.5)
• CVE-2022-37865 — Apache Ivy allows creating/overwriting any file on the system (CVSS 9.1)