OM
Product
omnifaces
2
CVEs
0
On KEV
8.2
Max CVSS
1
New 30D
Severity mix
Critical 0High 2Medium 0Low 0
Watch
Add omnifaces to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-102695 | 8.2 | Oct 14 | OmniFaces: Forged combined-resource IDs and related output/push boundaries Affected: < 1.14.3; >= 2.0, < 2.7.33; >= 3.0, < 3.14.23; >= 4.0, < 4.7.12; >= 5.0, < 5.4.2 |
| CVE-2026-41883 | 8.1 | May 8 | OmniFaces: EL injection via crafted resource name in wildcard CDN mapping Affected: < 1.14.2; >= 2.0-RC1, < 2.7.32; >= 3.0-RC1, < 3.14.16; >= 4.0-M1, < 4.7.5; >= 5.0-M1, < 5.2.3 |
Showing 2