What’s Vulnerable › Products

Apache Software Foundation Apache Tapestry vulnerabilities

11 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation Apache Tapestry version is affected

Latest Apache Software Foundation Apache Tapestry vulnerabilities

• CVE-2026-61899 — Apache Tapestry: Possible classpath file download through URL manipulation (CVSS 7.5)
• CVE-2022-46366 — Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input (CVSS 9.8)
• CVE-2022-31781 — Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022) (CVSS 7.5)
• CVE-2021-30638 — An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later (CVSS 7.5)
• CVE-2021-27850 — Bypass of the fix for CVE-2019-0195 (CVSS 9.8)
• CVE-2020-17531 — Deserialization flaw in EOL Tapestry 4. (CVSS 9.8)
• CVE-2020-13953 — (CVSS 5.3)
• CVE-2019-10071 — (CVSS 9.8)
• CVE-2019-0207 — (CVSS 7.5)
• CVE-2019-0195 — (CVSS 9.8)
• CVE-2014-1972 — (CVSS 7.8)