Known Vulnerabilities for Apache Wicket by Apache Software Foundation
Listed below are 10 of the newest known vulnerabilities associated with "Apache Wicket" by "Apache Software Foundation".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-111089 json | Apache Wicket reads texts from the application's resource bundles — a localized label, a css class name — and writes some... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-95863 json | Improper neutralization of input during web page generation in Apache Wicket. Apache Wicket generates JavaScript that refers... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-87718 json | Apache Wicket 10.10.0, 10.11.0 and 9.24.0 do not set the Content-Security-Policy headers on a page whose render request handl... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-84231 json | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.markup.html.link.ExternalLin... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-84177 json | Incorrect behavior order in Apache Wicket: a file path is validated before the framework appends the attributes that complete... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-84172 json | Files accessible to external parties in Apache Wicket. org.apache.wicket.markup.html.PackageResourceGuard decides whether a ... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-84170 json | Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.Ab... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-83594 json | Memory allocation with an excessive size value in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.FileUplo... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-83559 json | Improper encoding or escaping of output in Apache Wicket. org.apache.wicket.core.util.string.JavaScriptUtils#escapeQuotes() ... | Not Provided | 2026-11-01 | 2026-11-01 |
| CVE-2026-83539 json | Improper neutralization of input during web page generation in Apache Wicket. org.apache.wicket.extensions.markup.html.basic... | Not Provided | 2026-11-01 | 2026-11-01 |