Known Vulnerabilities for Entity Api by Entity Api Project
Listed below are 7 of the newest known vulnerabilities associated with "Entity Api" by "Entity Api Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-112183 json | MISP contains a CSS injection vulnerability in the remote event preview feature. When a user previews an event from a linked ... | Not Provided | 2026-10-19 | 2026-10-19 |
| CVE-2026-111903 json | phpMyFAQ 4.2.0-alpha before 4.2.0-beta contains a stored cross-site scripting vulnerability in SvgSanitizer that allows users... | Not Provided | 2026-10-17 | 2026-10-19 |
| CVE-2026-111684 json | Magistrala through 1.0.0 contains an authorization bypass vulnerability that allows authenticated workspace members to view, ... | Not Provided | 2026-10-16 | 2026-10-21 |
| CVE-2026-111637 json | NexoPOS through 6.2.4 contains a missing authentication vulnerability that allows unauthenticated attackers to read accountin... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-111252 json | A denial of service vulnerability exists in the XML parsing of multiple versions of OpenNMS Meridian and Horizon. OpenNMS par... | Not Provided | 2026-10-15 | 2026-10-16 |
| CVE-2026-110863 json | Better Auth @better-auth/sso from 1.7.0-rc.2 before 1.7.3 contains an authentication bypass vulnerability that allows authent... | Not Provided | 2026-10-14 | 2026-10-16 |
| CVE-2026-110252 json | The WPeMatico RSS Feed Fetcher plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and inclu... | Not Provided | 2026-10-16 | 2026-10-16 |
| CVE-2026-110217 json | Lenve vhr through commit 03abbd3 contains an information disclosure vulnerability that allows any authenticated user to retri... | Not Provided | 2026-10-13 | 2026-10-14 |
| CVE-2026-109430 json | Ellucian WebAdvisor 3.2 contains an unauthenticated XML External Entity (XXE) injection vulnerability that allows remote atta... | Not Provided | 2026-10-15 | 2026-10-15 |
| CVE-2026-108086 json | ** UNSUPPORTED WHEN ASSIGNED ** Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerab... | Not Provided | 2026-10-20 | 2026-10-20 |
Known Affected Configurations (CPE V2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Application | Entity Api Project | Entity Api | 8.x-1.x | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-1.0 | |||
| Application | Entity Api Project | Entity Api | 8.x-0.x | |||
| Application | Entity Api Project | Entity Api | 8.x-0.1 | |||
| Application | Entity Api Project | Entity Api | 7.x-1.x | |||
| Application | Entity Api Project | Entity Api | 7.x-1.9 | |||
| Application | Entity Api Project | Entity Api | 7.x-1.8 | |||
| Application | Entity Api Project | Entity Api | 7.x-1.7 | |||
| Application | Entity Api Project | Entity Api | 7.x-1.6 | |||
| Application | Entity Api Project | Entity Api | 7.x-1.5 |