org.omnifaces:omnifaces vulnerabilities
CVEs whose affected-version data names the org.omnifaces:omnifaces package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-102695High· 8.2OmniFaces is a utility library for Faces
OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a structurally valid deflated and base64 encoded combined resource ID without verifying th…
▾ Twilightomnifaces · org.omnifaces:omnifacesEPSS 0.31%via NVD
GHSA-fp43-vj7g-pg92High· 7.5OmniFaces: Forged combined-resource IDs and related output/push boundaries
OmniFaces: Forged combined-resource IDs and related output/push boundaries
▾ Twilightomnifaces · org.omnifaces:omnifacesvia GHSA