Skip to content
OpenAdvisories

Package · Maven

org.apache.wicket:wicket-parent

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Medium 6.1
    CVE-2026-42509

    Apache Wicket: crafted strings can break out of the JavaScript sequence

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, 9.0.0, from 10.0.0 through 10.8.0. Users are recommended to upgrade to version 10…

    Apache Software Foundation Apache Wicket org.apache.wicket:wicket-parent Maven
  • High 7.5
    CVE-2026-43646

    Apache Wicket: crafted URLs can bypass PackageResourceGuard

    Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Wicket. This issue affects Apache Wicket: from 8.0.0 through 8.17.0, from 9.0.0 through 9.22.0, from 10.0.0 through 10.8.0. Users are recommended to upgrade to version 10.9.0, …

    Apache Software Foundation Apache Wicket org.apache.wicket:wicket-parent Maven