org.wrensecurity.commons:json-resource-http vulnerabilities

CVEs whose affected-version data names the org.wrensecurity.commons:json-resource-http package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-2102Medium· 6.1

6d ago

XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter

wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse() method used the _mimeType request parameter to set the Content-Type response header with…

▾ SunlitWren Security · org.wrensecurity.commons:json-resource-httpEPSS 0.27%via CVEORG