Companies/Confluence/CVEs

Confluence CVEs

253 vulnerabilities mapped to Confluence’s software or packages, 11 of them in CISA’s Known Exploited Vulnerabilities catalog, newest first. Not a statement that the hosted service was exposed.

CVEs mapped to a company Rewindex tracks (by CVE affected-product data, NVD CPE, vendor advisories and package feeds), every entry in CISA’s Known Exploited Vulnerabilities catalog, and CVEs named in a tracked status incident. Other CVEs are not listed. Same list on the all-vendor CVE index.

• 2026-07-20

  CVE-2026-55831 Netty SPDY SETTINGS frame count materializes unbounded settings map

  CVSS 7.5 highEPSS 0.66%

• 2026-07-14

  CVE-2026-48801 linkify-it: Quadratic algorithmic complexity in LinkifyIt#match scan loop

  CVSS 7.5 highEPSS 0.39%

• 2026-07-08

  CVE-2026-59887 linkify-it: Quadratic-complexity DoS via the `mailto:` validator scan-loop on attacker text

  CVSS 7.5 highEPSS 0.64%

• 2026-07-08

  CVE-2026-59879 Immutable.js `List` 32-bit trie overflow → unrecoverable DoS

  CVSS 7.5 highEPSS 0.58%

• 2026-07-08

  CVE-2026-59880 Immutable.js: Hash-collision algorithmic complexity denial of service in Immutable.Map/Set

  CVSS 7.5 highEPSS 0.66%

• 2026-07-08

  CVE-2026-59871 node-tar: Process crash via PAX numeric path type confusion

  CVSS 5.3 mediumEPSS 0.64%

• 2026-07-08

  CVE-2026-59874 node-tar: Negative tar entry size causes infinite loop in archive replace

  CVSS 7.5 highEPSS 0.43%

• 2026-07-08

  CVE-2026-59873 node-tar: Decompression/parse DoS via unlimited input

  CVSS 7.5 highEPSS 0.58%

• 2026-07-06

  CVE-2026-54291 Silent channel-binding authentication downgrade via unsupported certificate algorithms

  CVSS 5.9 mediumEPSS 0.24%

• 2026-06-29

  CVE-2026-55276 Apache Tomcat: Logged effective web.xml is incomplete

  CVSS 9.1 criticalEPSS 0.61%

• 2026-06-29

  CVE-2026-53434 Apache Tomcat: Invalid CRL configuration doesn't trigger failure for FFM Connector

  CVSS 9.1 criticalEPSS 0.59%

• 2026-06-29

  CVE-2026-53404 Apache Tomcat: Bad ornext processing in RewriteValve

  CVSS 7.3 highEPSS 0.65%

• 2026-06-29

  CVE-2026-13676 fast-uri vulnerable to host confusion via failed IDN canonicalization

  CVSS 7.5 highEPSS 0.69%

• 2026-06-24

  CVE-2026-13006 Incomplete protection against CVE-2025-11226

  CVSS 7.0 highEPSS 0.18%

• 2026-06-23

  CVE-2026-54512 jackson-databind: PolymorphicTypeValidator bypass via generic type parameters allows arbitrary class instantiation

  CVSS 8.1 highEPSS 0.94%

• 2026-06-23

  CVE-2026-54513 jackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)

  CVSS 8.1 highEPSS 1.2%

• 2026-06-16

  CVE-2026-48779 ws: Memory exhaustion DoS from tiny fragments and data chunks

  CVSS 7.5 highEPSS 0.81%

• 2026-06-12

  CVE-2026-12143 form-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)

  CVSS 7.5 highEPSS 0.67%

• 2026-06-12

  CVE-2026-50010 Netty's wrapping plain trust manager silently disables hostname verification

  CVSS 7.5 highEPSS 0.49%

• 2026-06-12

  CVE-2026-48043 netty-codec-http2: ByteBuf Reference-Count Leak in DelegatingDecompressorFrameListener Leads to Memory Exhaustion

  CVSS 5.3 mediumEPSS 0.75%

• 2026-06-12

  CVE-2026-47691 Netty has Insufficient Bailiwick Validation for NS Records

  CVSS 8.7 highEPSS 0.37%

• 2026-06-12

  CVE-2026-45674 Netty Vulnerable to DNS Cache Poisoning via Missing Bailiwick Checks in CNAME Records

  CVSS 8.7 highEPSS 0.29%

• 2026-06-12

  CVE-2026-45416 Netty: SNI handler pre-allocates up to 16 MiB from nine attacker bytes

  CVSS 7.5 highEPSS 0.92%

• 2026-06-11

  CVE-2026-44249 Netty has an IPv6 Subnet Filter Bypass via Incorrect Comparator Masking

  CVSS 8.1 highEPSS 0.99%

• 2026-06-11

  CVE-2026-44486 Axios: Proxy-Authorization header leaks to redirect target when proxy is re-evaluated to direct connection

  CVSS 7.5 highEPSS 0.55%

• 2026-06-11

  CVE-2026-44487 Axios: Proxy-Authorization Credential Leak to Origin Server Across HTTP-to-HTTPS Redirect in Axios Node.js HTTP Adapter

  CVSS 7.5 highEPSS 0.69%

• 2026-06-11

  CVE-2026-44488 Axios: Allocation of Resources Without Limits or Throttling in axios

  CVSS 7.5 highEPSS 0.67%

• 2026-06-11

  CVE-2026-44490 Axios: DoS & Header Injection via Prototype Pollution Read-Side Gadgets in axios merge functions

  CVSS 4.8 mediumEPSS 0.33%

• 2026-06-11

  CVE-2026-44496 Axios: Regular Expression Denial of Service (ReDoS) via Cookie Name Injection

  CVSS 7.5 highEPSS 5.4%

• 2026-06-11

  CVE-2026-44495 Axios: Credential Theft and Response Hijacking via Prototype Pollution Gadget in Config Merge

  CVSS 7.0 highEPSS 0.85%

• 2026-06-11

  CVE-2026-44494 Axios: Full Man-in-the-Middle via Prototype Pollution Gadget in `config.proxy`

  CVSS 8.7 highEPSS 1.0%

• 2026-06-11

  CVE-2026-44492 Axios: shouldBypassProxy does not recognize IPv4-mapped IPv6 addresses, allowing NO_PROXY bypass (incomplete fix for CVE-2025-62718)

  CVSS 8.6 highEPSS 12.9%

• 2026-06-10

  CVE-2026-46625 JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection

  CVSS 7.5 highEPSS 0.92%

• 2026-06-09

  CVE-2026-41850 Spring Framework Algorithmic Denial of Service via SpEL Expressions

  CVSS 7.5 highEPSS 0.39%

• 2026-06-09

  CVE-2026-41845 Spring Framework Cross-site Scripting via JavaScriptUtils

  CVSS 7.1 highEPSS 0.16%

• 2026-06-09

  CVE-2026-41842 Spring Framework Denial of Service via Versioned Resources in Spring MVC and WebFlux

  CVSS 7.5 highEPSS 0.40%

• 2026-06-09

  CVE-2026-40983 Micrometer gRPC server instrumentation DoS vulnerability

  CVSS 7.5 highEPSS 0.63%

• 2026-05-29

  CVE-2026-45149 brace-expansion: Large numeric range defeats documented `max` DoS protection

  CVSS 6.5 mediumEPSS 0.30%

• 2026-05-15

  CVE-2026-45736 ws: Uninitialized memory disclosure

  CVSS 4.4 mediumEPSS 0.74%

• 2026-05-13

  CVE-2026-42587 Netty: HttpContentDecompressor maxAllocation bypass via Content-Encoding: br/zstd/snappy enables decompression bomb DoS

  CVSS 7.5 highEPSS 0.99%

• 2026-05-13

  CVE-2026-42585 Netty: HTTP Request Smuggling due to malformed Transfer-Encoding

  CVSS 6.5 mediumEPSS 0.27%

• 2026-05-13

  CVE-2026-42584 Netty: HttpClientCodec response desynchronization

  CVSS 7.3 highEPSS 0.84%

• 2026-05-13

  CVE-2026-42583 Netty: Lz4FrameDecoder resource exhaustion

  CVSS 7.5 highEPSS 0.46%

• 2026-05-13

  CVE-2026-42579 Netty: DNS Codec Input Validation Bypass in Netty (Encoder + Decoder)

  CVSS 7.5 highEPSS 1.0%

• 2026-05-12

  CVE-2026-43515 Apache Tomcat: Security constraints not correctly applied

  CVSS 9.1 criticalEPSS 1.2%

• 2026-05-12

  CVE-2026-43513 Apache Tomcat: LockOutRealm treats user names as case-sensitive

  CVSS 7.5 highEPSS 0.50%

• 2026-05-12

  CVE-2026-43512 Apache Tomcat: Digest authenticator will authenticate any unknown user

  CVSS 9.8 criticalEPSS 1.3%

• 2026-05-12

  CVE-2026-41293 Apache Tomcat: HTTP/2 request headers not validated

  CVSS 9.8 criticalEPSS 1.7%

• 2026-05-12

  CVE-2026-42498 Apache Tomcat: WebSocket authentication header exposure

  CVSS 7.3 highEPSS 0.65%

• 2026-05-12

  CVE-2026-41284 Apache Tomcat: Unbounded read in WebDAV LOCK and PROPFIND handling

  CVSS 7.5 highEPSS 0.84%

All vendors’ CVEs · JSON · Markdown

• CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
• This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
• Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
• EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)