{"action":"Upgrade com.ritense.valtimo:inbox to 13.22.0.RELEASE or later.","affected":[{"fixed":"13.22.0.RELEASE","introduced":"13.0.0.RELEASE"}],"component":"com.ritense.valtimo:inbox","cve_ids":["CVE-2026-34164"],"ecosystem":"Maven","epss":0.00366,"exploited":false,"fixed_versions":["13.22.0.RELEASE"],"ghsa_id":"GHSA-hfrg-mcvw-8mch","id":"tcs_01M5N90GZXV4ZN498ZM9HYAHQB","modified_at":"2026-09-10T03:51:01.978647389Z","published_at":"2026-04-16T20:42:55Z","references":["https://osv.dev/vulnerability/GHSA-hfrg-mcvw-8mch","https://github.com/valtimo-platform/valtimo/security/advisories/GHSA-hfrg-mcvw-8mch","https://nvd.nist.gov/vuln/detail/CVE-2026-34164","https://github.com/generiekzaakafhandelcomponent/gzac-issues/issues/653","https://github.com/valtimo-platform/valtimo/pull/497","https://github.com/valtimo-platform/valtimo/commit/f16a1940ba7b34627c0b966f98ca78655ace9335","https://github.com/valtimo-platform/valtimo","https://github.com/valtimo-platform/valtimo/releases/tag/13.22.0"],"severity":{"label":"medium","score":4.9},"sources":[{"source":"osv","source_id":"GHSA-hfrg-mcvw-8mch","url":"https://osv.dev/vulnerability/GHSA-hfrg-mcvw-8mch"}],"summary":"Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService"}