apache_hertzbeat vulnerabilities

CVEs whose affected-version data names the apache_hertzbeat package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-114442None

3d ago

Apache HertzBeat: incomplete XPath expression validation in aliasFields

Apache HertzBeat versions 1.7.1, 1.7.2, 1.7.3, 1.8.0, and 1.9.0 have incomplete XPath expression validation in the HTTP collector XML parsing path. An authenticated user with permission to create monitor templates can supply XPath expres…

▾ SunlitApache Software Foundation · Apache HertzBeatEPSS 0.22%via CVEORG