{"action":"Upgrade org.mapfish.print:print-lib to 3.28.28 (3.28.x), 3.30.30 (3.30.x), 3.31.21 (3.31.x), 3.33.14 (3.33.x) or 4.0.3 (4.0.x) or later.","affected":[{"fixed":"3.28.28","introduced":"3.23.0"},{"fixed":"3.30.30","introduced":"3.29.0"},{"fixed":"3.31.21","introduced":"3.31.0"},{"fixed":"3.33.14","introduced":"3.32.0"},{"fixed":"4.0.3","introduced":"3.34.0"}],"component":"org.mapfish.print:print-lib","cve_ids":["CVE-2026-44672"],"ecosystem":"Maven","epss":0.00325,"exploited":false,"fixed_versions":["3.28.28","3.30.30","3.31.21","3.33.14","4.0.3"],"ghsa_id":"GHSA-q7m6-wpvf-mvwx","id":"tcs_01M5N98ZVYAMSN9SGAZF26XVRE","modified_at":"2026-06-09T02:15:07.546721039Z","published_at":"2026-05-13T01:35:37Z","references":["https://osv.dev/vulnerability/GHSA-q7m6-wpvf-mvwx","https://github.com/mapfish/mapfish-print/security/advisories/GHSA-q7m6-wpvf-mvwx","https://nvd.nist.gov/vuln/detail/CVE-2026-44672","https://github.com/mapfish/mapfish-print"],"severity":{"label":"critical"},"sources":[{"source":"osv","source_id":"GHSA-q7m6-wpvf-mvwx","url":"https://osv.dev/vulnerability/GHSA-q7m6-wpvf-mvwx"}],"summary":"Mapfish Print: Remote Code Injection (RCE) in Dynamic table"}