{"action":"Upgrade org.omnifaces:omnifaces to 1.14.3 (1.x), 2.7.33 (2.x), 3.14.23 (3.x), 4.7.12 (4.x) or 5.4.2 (5.x) or later.","affected":[{"fixed":"1.14.3","introduced":"0"},{"fixed":"2.7.33","introduced":"2.0.0"},{"fixed":"3.14.23","introduced":"3.0.0"},{"fixed":"4.7.12","introduced":"4.0.0"},{"fixed":"5.4.2","introduced":"5.0.0"}],"component":"org.omnifaces:omnifaces","cve_ids":["CVE-2026-102695"],"ecosystem":"Maven","epss":0.00306,"exploited":false,"fixed_versions":["1.14.3","2.7.33","3.14.23","4.7.12","5.4.2"],"ghsa_id":"GHSA-fp43-vj7g-pg92","id":"tcs_01M5N8WDPZKKHRVQC26HSR3NPJ","modified_at":"2026-10-14T16:15:04.201415342Z","published_at":"2026-07-24T22:35:27Z","references":["https://osv.dev/vulnerability/GHSA-fp43-vj7g-pg92","https://github.com/omnifaces/omnifaces/security/advisories/GHSA-fp43-vj7g-pg92","https://github.com/omnifaces/omnifaces/commit/59d6c5188c39418546fe500d05036645987a77d1","https://github.com/omnifaces/omnifaces/commit/a52b92461cf39d983f51ce8724fe7e6b944073e4","https://github.com/omnifaces/omnifaces/commit/aa42da361821ddfbb85b126564e71587347d2786","https://github.com/omnifaces/omnifaces/commit/c43eef01174a4dc09cec44eff553ff6284150af7","https://github.com/omnifaces/omnifaces/commit/d5cae243c4692555efaa4ba774e0f8f60e3f4db5","https://github.com/omnifaces/omnifaces"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-fp43-vj7g-pg92","url":"https://osv.dev/vulnerability/GHSA-fp43-vj7g-pg92"}],"summary":"OmniFaces: Forged combined-resource IDs and related output/push boundaries"}