Skip to content
OpenAdvisories

Vendor

Activiti

1 known vulnerabilities.

Products

Activiti 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-91145

    Activiti through 7.1.0.M6 Expression Injection via Mail Task

    Activiti through 7.1.0.M6 fails to validate hash-brace deferred expressions in process variables, allowing attackers to bypass expression filtering. Attackers can inject expressions beginning with #{ that are stored and later evaluated in the full Spring cont…

    Activiti Activiti