Maven/org.mapfish.print:print-lib CVE-2026-44672: critical, EPSS 0.33%
Mapfish Print: Remote Code Injection (RCE) in Dynamic table
Action: Upgrade org.mapfish.print:print-lib to 3.28.28 (3.28.x), 3.30.30 (3.30.x), 3.31.21 (3.31.x), 3.33.14 (3.33.x) or 4.0.3 (4.0.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.23.0 | 3.28.28 | - |
| 3.29.0 | 3.30.30 | - |
| 3.31.0 | 3.31.21 | - |
| 3.32.0 | 3.33.14 | - |
| 3.34.0 | 4.0.3 | - |
Fixed versions
| 3.28.28 | 3.30.30 | 3.31.21 | 3.33.14 | 4.0.3 |
Sources
- osv: GHSA-q7m6-wpvf-mvwx
- https://github.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx
- https://nvd.nist.gov/vuln/detail/CVE-2026-44672
- https://github.com/mapfish/mapfish-print
CVE-2026-44672 · published · modified · JSON