org.apache.causeway:* vulnerabilities

CVEs whose affected-version data names the org.apache.causeway:* package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-64408Medium· 6.3

11mo ago

Apache Causeway: Java deserialization vulnerability to authenticated attackers

Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution (RCE) through user-controllable URL parameters. These vulnerabilities affect all applications using Causeway's ViewModel functionality and can be…

▾ SunlitApache Software Foundation · org.apache.causeway:*EPSS 12%via CVEORG