Apache Software Foundation Apache Tapestry

• CVE-2026-61899 High 7.5 Apache Tapestry: Possible classpath file download through URL manipulation 0.7%
• CVE-2022-46366 Critical 9.8 Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input 3.5%
• CVE-2022-31781 Unrated Regular Expression Denial of Service (ReDoS) in ContentType.java. (GHSL-2022-022) 2.0%
• CVE-2021-30638 Unrated An Information Disclosure due to insufficient input validation exists in Apache Tapestry 5.4.0 and later 6.6%
• CVE-2021-27850 Unrated Bypass of the fix for CVE-2019-0195 93.6%
• CVE-2020-17531 Unrated Deserialization flaw in EOL Tapestry 4. 10.0%