Skip to content
OpenAdvisories
High · 8.8 CVE-2026-24343 EUVD-2026-6877GHSA-jr4c-vcm8-65vh

Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions

Published Feb 10, 2026 · Updated Feb 10, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache HertzBeat

Description

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache HertzBeat 1.7.1 – < 1.8.0 1.8.0

References