EM
Product
Eclipse Mojarra
by Eclipse Foundation · last CVE Aug 5, 2026
1
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 1Medium 0Low 0
Watch

Add Eclipse Mojarra to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-46581
7.5
1%
Aug 5
In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not properly sanitize and/or block remote URLs, allowing an attacker to specify a URL to…
Affected: 2.3 through 5.0
Showing 1