Threats affecting pkg:maven/ibm/documentation_offline

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.8	EPSS 0.8%	CVE-2026-17482IBM Documentation Offline · External Control of File Name or Path Critical9.8EPSS 0.8%2026-08-13CVE Database V5CVE-2026-17482 IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper control of file paths. EPSS 0.8%Vulnerability CWE-73	CVE Database V5	2026-08-13
High	8.8	EPSS 0.9%	CVE-2026-17481IBM Documentation Offline · Log Injection High8.8EPSS 0.9%2026-08-13CVE Database V5CVE-2026-17481 IBM Documentation Offline versions 1.0.0 through 1.4.1 contain a vulnerability due to improper output neutralization for logs (CWE-117). This flaw could allow a remote attacker to execute arbitrary code without requiring privileges or user interaction. The vulnerability has a high severity with a CVSS score of 8.8. No official patch or remediation guidance is currently provided by the vendor. EPSS 0.9%Vulnerability CWE-117	CVE Database V5	2026-08-13

Page 1 of 1