dimpact-zaakafhandelcomponent vulnerabilities

CVEs whose affected-version data names the dimpact-zaakafhandelcomponent package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-55551Medium· 6.5

1w ago

ZAC: Missing per-zaaktype authorization on by-ID decision and process reads

ZAC is an open-source, workflow-based Common Ground component for Dutch municipal case management. Prior to 5.2.0, by-id read endpoints in `src/main/kotlin/nl/info/zac/app/zaak/ZaakRestService.kt` omit `assertPolicy`(`policyService.readZ…

▾ Sunlitinfonl · dimpact-zaakafhandelcomponentEPSS 0.26%via CVEORG