Threats affecting pkg:maven/Apache Software Foundation/org.apache.tapestry:tapestry-core

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.7%	CVE-2026-61899Apache Tapestry · Information Exposure High7.5EPSS 0.7%2026-08-10CVE Database V5CVE-2026-61899 Apache Tapestry versions 5.5.0 through 5.9.0 contain a vulnerability that allows unauthorized attackers to download classpath assets via specially crafted URLs. This exposure of sensitive information (CWE-200) can lead to disclosure of potentially sensitive internal resources. The issue is resolved in version 5.9.1, which users are recommended to upgrade to. EPSS 0.7%Vulnerability Apache Software Foundation CWE-200 #ghsa-vx78-858g-p63x	CVE Database V5	2026-08-10

Page 1 of 1