Approved changes feed: RSS · Atom

cpe:2.3:a:apache:commons_jxpath:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductCommons Jxpath (8ac63b4c-5223-558e-96f7-bfcc1ef6d5e4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:apache/commons-jxpath purl2cpe 2026-06-01 10:14:32.583936
pkg:deb/debian/libcommons-jxpath-java purl2cpe 2026-06-01 10:14:32.583939
pkg:deb/ubuntu/libcommons-jxpath-java purl2cpe 2026-06-01 10:14:32.583942
pkg:github/apache/commons-jxpath purl2cpe 2026-06-01 10:14:32.583945
pkg:maven/commons-jxpath/commons-jxpath purl2cpe 2026-06-01 10:14:32.583948
pkg:rpm/centos/apache-commons-jxpath purl2cpe 2026-06-01 10:14:32.583951
pkg:rpm/fedora/apache-commons-jxpath purl2cpe 2026-06-01 10:14:32.583953
pkg:rpm/opensuse/apache-commons-jxpath purl2cpe 2026-06-01 10:14:32.583956

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-40160 vulnerable 2026-06-08 05:48:24.060544 Stack Overflow in JXPath
** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
Published: 2022-10-06T00:00:00.000Z
Updated: 2024-08-03T12:14:39.660Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-40159 vulnerable 2026-06-08 05:48:24.060029 Stack Overflow in JXPath
** DISPUTED ** This record was originally reported by the oss-fuzz project who failed to consider the security context in which JXPath is intended to be used and failed to contact the JXPath maintainers prior to requesting the CVE allocation. The CVE was then allocated by Google in breach of the CNA rules. After review by the JXPath maintainers, the original report was found to be invalid.
Published: 2022-10-06T00:00:00.000Z
Updated: 2024-08-03T12:14:39.803Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.