Package · Maven

org.apache.causeway.commons:causeway-commons

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 6.3

CVE-2025-64408 EPSS 12%

Apache Causeway: Java deserialization vulnerability to authenticated attackers

Apache Causeway faces Java deserialization vulnerabilities that allow remote code execution (RCE) through user-controllable URL parameters. These vulnerabilities affect all applications using Causeway's ViewModel functionality and can be exploited by authenti…

Apache Software Foundation Apache Causeway org.apache.causeway.core:causeway-applib org.apache.causeway.viewer:causeway-viewer-wicket Maven

Nov 19, 2025