omnifaces has 2 CVEs on record. 1 was published in the last 90 days. The median CVSS is 7.8 (high).
CVEs per month
Last 12 months, by publish date
1125/111225/120126/010226/020326/030426/040526/050626/060726/070826/080926/091026/10
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.8
- Publish → KEV
- —
- Last 90 days
- 1 prev 1
2
Total CVEs
0
Critical
0
CISA KEV
0
Exploited
omnifaces vulnerabilities
CVEs affecting omnifaces, newest first. Open any entry for full detail, references, and exploit status.
2 CVEsRSS
CVE-2026-102695High· 8.2OmniFaces is a utility library for Faces
OmniFaces is a utility library for Faces. In OmniFaces versions before 1.14.3, 2.7.33, 3.14.23, 4.7.12, and 5.4.2, CombinedResourceHandler accepts a structurally valid deflated and base64 encoded combined resource ID without verifying th…
▾ Twilightomnifaces · org.omnifaces:omnifacesEPSS 0.31%via NVD
GHSA-fp43-vj7g-pg92High· 7.5OmniFaces: Forged combined-resource IDs and related output/push boundaries
OmniFaces: Forged combined-resource IDs and related output/push boundaries
▾ Twilightomnifaces · org.omnifaces:omnifacesvia GHSA