CVE-2026-102695
1 advisory.
Maven/org.omnifaces:omnifaces CVE-2026-102695: high 7.5
OmniFaces: Forged combined-resource IDs and related output/push boundaries
Action: Upgrade org.omnifaces:omnifaces to 1.14.3 (1.x), 2.7.33 (2.x), 3.14.23 (3.x), 4.7.12 (4.x) or 5.4.2 (5.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.14.3 | - |
| 2.0.0 | 2.7.33 | - |
| 3.0.0 | 3.14.23 | - |
| 4.0.0 | 4.7.12 | - |
| 5.0.0 | 5.4.2 | - |
Fixed versions
| 1.14.3 | 2.7.33 | 3.14.23 | 4.7.12 | 5.4.2 |
Sources
- osv: GHSA-fp43-vj7g-pg92
- https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92
- https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1
- https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4
- https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786
- https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7
- https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5
- https://github.com/omnifaces/omnifaces
CVE-2026-102695 · published · modified · JSON