Do Son Two Apache Jackrabbit vulnerabilities, including critical session hijack flaw CVE-2026-92414 (CVSS 9.3), are fixed. Upgrade to 2.23.6 now.
Apache Jackrabbit
A new vulnerability in Apache Jackrabbit (CVE-2025-58782) exposes enterprise systems to JNDI injection, which could lead to remote code execution.
A critical XXE flaw (CVE-2025-53689) in Apache Jackrabbit allows blind XXE attacks for data exfiltration, DoS, or internal file exposure. Update to patched versions immediately!
A critical security vulnerability, identified as CVE-2023-37895, has been discovered in Apache Jackrabbit, an open-source content repository