Skip to content
OpenAdvisories

Package · Maven

org.dspace:dspace-api

8 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.0
    CVE-2026-49832

    DSpace: Remote Code Execution (RCE) possible in Velocity Templates used by LDN

    DSpace open source software is a repository application which provides durable access to digital resources. From versions 8.0-rc1 to before 8.4, versions 9.0-rc1 to before 9.3, and version 10-rc1, Remote Code Execution (RCE) is possible via Velocity Templates…

    DSpace DSpace org.dspace:dspace-api Maven
  • High 7.2
    CVE-2022-31195 Public exploit

    Path traversal vulnerability in Simple Archive Format package import in DSpace

    DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the ItemImportServiceImpl is vulnerable to a path traversal vulnerability. This means a malicious SAF (simple archive format) pack…

    DSpace DSpace org.dspace:dspace-api Maven
  • High 7.2
    CVE-2021-41189

    Communities and collections administrators can escalate their privilege up to system administrator

    DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their permission up to become system administrator. This vulnerability only exists in 7.0 and does not impact 6.x or below. This is…

    DSpace DSpace org.dspace:dspace-api Maven