Skip to content
OpenAdvisories

Product · dromara

Jpom

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.3
    CVE-2026-91993

    Jpom through 2.11.12 Workspace Isolation Bypass via /build/branch-list

    Jpom through 2.11.12 fails to validate workspace ownership when resolving repositoryId on the /build/branch-list endpoint, allowing authenticated users to access repositories from other workspaces. Attackers can submit repository identifiers from different wo…

    dromara Jpom