Threats affecting pkg:maven/stirling-tools/stirling-pdf

CVE-2026-129173 is a medium severity vulnerability in Stirling-Tools Stirling-PDF versions 3.0 through 3.3.0. It affects the WorkflowParticipantController.getParticipantDetails function, causing an insufficient session timeout value. This flaw allows remote attackers to potentially maintain sessions longer than intended, increasing the risk of unauthorized access. The vendor has not responded to disclosure and no patch or fix information is available.