Log in Start free

valtimo-platform

Products

ProductCVEsExploitedLatest
valtimo3–May 14, 2026
valtimo-backend-libraries2–Aug 28, 2025
valtimo-frontend-libraries1–May 13, 2024

Exploited and recent CVEs

  • CVE-2026-44516 High 7.6 Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer 0.2%
  • CVE-2026-42555 Critical 9.1 Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin users 0.6%
  • CVE-2026-34164 Medium 4.9 Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService 0.4%
  • CVE-2025-58059 Critical 9.1 Valtimo scripting engine can be used to gain access to sensitive data or resources 0.4%
  • CVE-2025-48881 High 8.3 Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users 0.3%
  • CVE-2024-34706 Critical 9.8 @valtimo/components exposes access token to form.io 1.1%