Skip to content

Vulnerabilities of Apache Software Foundation Apache Ivy

Is your version affected?

CVE Summary Score Published
CVE-2026-26032 The PackagerResolver of Apache Ivy is able to download online artifacts and to (re)package them in a format defined by a… Not rated Jul 15, 2026
CVE-2022-46751 Improper Restriction of XML External Entity Reference, XML Injection (aka Blind XPath Injection) vulnerability in Apache… Not rated Aug 21, 2023
CVE-2022-37866 When Apache Ivy downloads artifacts from a repository it stores them in the local file system based on a user-supplied… Not rated Nov 7, 2022
CVE-2022-37865 With Apache Ivy 2.4.0 an optional packaging attribute has been introduced that allows artifacts to be unpacked on the… Not rated Nov 7, 2022

Other Apache Software Foundation products