Skip to content
OpenAdvisories

Package · Maven

io.pebbletemplates:pebble

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.8
    CVE-2025-1686

    Pebble has Arbitrary Local File Inclusion (LFI) Vulnerability via `include` macro

    Versions of the package io.pebbletemplates:pebble from 0 and before 4.1.0 are vulnerable to External Control of File Name or Path via the include tag. A high privileged attacker can access sensitive local files by crafting malicious notification templates tha…

    dependency-track-bundled io.pebbletemplates:pebble Wolfi Maven