Maven package
org.freemarker/freemarker
pkg:maven/org.freemarker/freemarker
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2026-84939 | Cri | 9.1 | >= 2.2.0, < 2.3.35 | 2.3.35 | Sep 10, 2026 | Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled (it's by default enabled). This issue affects Apache FreeMa |
- affected >= 2.2.0, < 2.3.35fixed 2.3.35
Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an arbitrary malformed locale identifier to FreeMarker, and the localized lookup configuration setting is enabled (it's by default enabled). This issue affects Apache FreeMa