Login Request a demo
JA
Product
Jackrabbit
by Apache · last CVE Oct 7, 2026
8
CVEs
0
On KEV
9.8
Max CVSS
2
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 2High 2Medium 2Low 0
Severity
All severities8Critical2High2Medium2Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Jackrabbit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-58782
6.5
1%
Sep 8
Deserialization of Untrusted Data vulnerability in Apache Jackrabbit Core and Apache Jackrabbit JCR Commons
Affected: 1.0.0 before 2.22.2
CVE-2026-92415
5.3
1%
Oct 7
Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies
Affected: 2.20.0 before 2.20.18; 2.22.0 before 2.22.5; 2.23.0 before 2.23.6
Showing 2