{"action":"Upgrade org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap to 3.6.11 (3.6.x), 4.1.6 (4.1.x) or 4.2.1 (4.2.x) or later.","affected":[{"fixed":"4.2.1","introduced":"4.2.0"},{"fixed":"4.1.6","introduced":"4.1.0"},{"fixed":"3.6.11","introduced":"0"}],"component":"org.apache.cxf.services.xkms:cxf-services-xkms-x509-repo-ldap","cve_ids":["CVE-2026-44930"],"ecosystem":"Maven","epss":0.00719,"exploited":false,"fixed_versions":["4.2.1","4.1.6","3.6.11"],"ghsa_id":"GHSA-pg32-686q-qh6x","id":"tcs_01M5N97C84KNMF5J966Q4MEVY0","modified_at":"2026-06-29T23:26:32.483244Z","published_at":"2026-05-26T13:30:16Z","references":["https://osv.dev/vulnerability/GHSA-pg32-686q-qh6x","https://nvd.nist.gov/vuln/detail/CVE-2026-44930","https://github.com/apache/cxf","https://lists.apache.org/thread/c1zqxppo1m5z3kbdhjn5p991zk09ynkh","http://www.openwall.com/lists/oss-security/2026/05/22/9"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-pg32-686q-qh6x","url":"https://osv.dev/vulnerability/GHSA-pg32-686q-qh6x"}],"summary":"Apache CXF has an LDAP injection vulnerability"}