VYPR

Omnifaces

by Omnifaces

Source repositories

CVEs (1)

  • CVE-2026-41883HigMay 8, 2026
    risk 0.46cvss 8.1epss 0.00

    OmniFaces is a utility library for Faces. Prior to versions 1.14.2, 2.7.32, 3.14.16, 4.7.5, and 5.2.3, there is a server-side EL injection leading to Remote Code Execution (RCE). This affects applications that use CDNResourceHandler with a wildcard CDN mapping (e.g.…