This is an automated email from the ASF dual-hosted git repository. golja pushed a commit to branch master in repository https://gitbox.apache.org/repos/asf/ofbiz-site.git
commit 20b890d7b039b6d2e4419b696585268c41577d22 Author: Anahita Goljahani <[email protected]> AuthorDate: Fri Jul 10 20:58:57 2026 +0200 Improved: Update security CVE references to include related PRs or commits for fixes in release 24.09.06 --- security.html | 34 +++++++++++++++++----------------- template/page/security.tpl.php | 34 +++++++++++++++++----------------- 2 files changed, 34 insertions(+), 34 deletions(-) diff --git a/security.html b/security.html index 9e5e421..6203f1c 100644 --- a/security.html +++ b/security.html @@ -159,23 +159,23 @@ <ul class="iconsList"> <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47342" target="external">CVE-2026-47342</a>; affected releases before 24.09.07; fixed in 24.09.07 with commit <a href="https://github.com/apache/ofbiz-framework/commit/bcf307bda4356e6f540052f57277c892330a62ab"; target="external">bcf307b</a></li> <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50223" target="external">CVE-2026-50223</a>; affected releases before 24.09.07; fixed in 24.09.07 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1331"; target="external">#1331</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1341"; target="external">#1341</a></li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46586" target="external">CVE-2026-46586</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45434" target="external">CVE-2026-45434</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45187" target="external">CVE-2026-45187</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41919" target="external">CVE-2026-41919</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35086" target="external">CVE-2026-35086</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31986" target="external">CVE-2026-31986</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31910" target="external">CVE-2026-31910</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31909" target="external">CVE-2026-31909</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31906" target="external">CVE-2026-31906</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31388" target="external">CVE-2026-31388</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31387" target="external">CVE-2026-31387</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31380" target="external">CVE-2026-31380</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31379" target="external">CVE-2026-31379</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31378" target="external">CVE-2026-31378</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29226" target="external">CVE-2026-29226</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29220" target="external">CVE-2026-29220</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29207" target="external">CVE-2026-29207</a>; affected releases before 24.09.06; fixed in 24.09.06</li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46586" target="external">CVE-2026-46586</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1208"; target="external">#1208</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1210"; target="external">#1210</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45434" target="external">CVE-2026-45434</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1198"; target="external">#1198</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1200"; target="external">#1200</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45187" target="external">CVE-2026-45187</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1191"; target="external">#1191</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1193"; target="external">#1193</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41919" target="external">CVE-2026-41919</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1128"; target="external">#1128</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35086" target="external">CVE-2026-35086</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1045"; target="external">#1045</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31986" target="external">CVE-2026-31986</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/6ba1356af67dbda4848f4c852b9ad8d3afb545c1"; target="external">6ba1356</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31910" target="external">CVE-2026-31910</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/b6ae5181cf13abcfc8e676e5ea9e912e4cc8313d"; target="external">b6ae518</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31909" target="external">CVE-2026-31909</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/dd823588254676e4eccb4e104d7a203946bfdf9e"; target="external">dd82358</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31906" target="external">CVE-2026-31906</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/85d0e5c8ccd6232afc3061c5f1ec134630536906"; target="external">85d0e5c</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31388" target="external">CVE-2026-31388</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/6b305e7ecc4480e67948a36dc5ebbbce82b78226"; target="external">6b305e7</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31387" target="external">CVE-2026-31387</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/730ad7b15fb288f4acfb04512872245eb6ac3343"; target="external">730ad7b</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31380" target="external">CVE-2026-31380</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/fee350530775d07b9b4ff4c3a37a289affe33b8e"; target="external">fee3505</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31379" target="external">CVE-2026-31379</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1158"; target="external">#1158</a> and commit <a href="https://github.com/apache/ofbiz-framework/commit/6b519ed9961833da7cedd1aadd232e3234aa8ad3"; target="external">6b519ed</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31378" target="external">CVE-2026-31378</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/60c19683f908ebae9d169f6e4ff49869a74e728e"; target="external">60c1968</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29226" target="external">CVE-2026-29226</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/989"; target="external">#989</a>, <a href="https://github.com/apache/ofbiz-framework/pull/991"; target="external">#991</a> and <a href="https://github.com/apache/ofbiz-framework/pull/994"; target="external">#994</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29220" target="external">CVE-2026-29220</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1135"; target="external">#1135</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29207" target="external">CVE-2026-29207</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/9734714eb81dc976680178f594994e4885fcd054"; target="external">9734714</a></li> <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61623" target="external">CVE-2025-61623</a>; affected releases before 24.09.03; fixed in 24.09.03 with commits <a href="https://github.com/apache/ofbiz-framework/commit/4c624298a6"; target="external">4c624298a6</a>, <a href="https://github.com/apache/ofbiz-framework/commit/e8ad44dc36"; target="external">e8ad44dc36</a>, <a href="https://github.com/apache/ofbiz-framework/commit/505c88cf45"; [...] <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59118" target="external">CVE-2025-59118</a>; affected releases before 24.09.03; fixed in 24.09.03 with commits <a href="https://github.com/apache/ofbiz-framework/commit/e1d30e8f55"; target="external">e1d30e8f55</a>, <a href="https://github.com/apache/ofbiz-framework/commit/cfee3063b1"; target="external">cfee3063b1</a>, <a href="https://github.com/apache/ofbiz-framework/commit/fd6a3b8644"; [...] <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54466" target="external">CVE-2025-54466</a>; affected releases before 24.09.02; fixed in 24.09.02 with commit <a href="https://gitbox.apache.org/repos/asf?p=ofbiz-plugins.git;h=5a35b4f84f"; target="external">5a35b4f84f</a></li> diff --git a/template/page/security.tpl.php b/template/page/security.tpl.php index b8ea6d5..159043c 100644 --- a/template/page/security.tpl.php +++ b/template/page/security.tpl.php @@ -60,23 +60,23 @@ <ul class="iconsList"> <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-47342" target="external">CVE-2026-47342</a>; affected releases before 24.09.07; fixed in 24.09.07 with commit <a href="https://github.com/apache/ofbiz-framework/commit/bcf307bda4356e6f540052f57277c892330a62ab"; target="external">bcf307b</a></li> <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-50223" target="external">CVE-2026-50223</a>; affected releases before 24.09.07; fixed in 24.09.07 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1331"; target="external">#1331</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1341"; target="external">#1341</a></li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46586" target="external">CVE-2026-46586</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45434" target="external">CVE-2026-45434</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45187" target="external">CVE-2026-45187</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41919" target="external">CVE-2026-41919</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35086" target="external">CVE-2026-35086</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31986" target="external">CVE-2026-31986</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31910" target="external">CVE-2026-31910</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31909" target="external">CVE-2026-31909</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31906" target="external">CVE-2026-31906</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31388" target="external">CVE-2026-31388</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31387" target="external">CVE-2026-31387</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31380" target="external">CVE-2026-31380</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31379" target="external">CVE-2026-31379</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31378" target="external">CVE-2026-31378</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29226" target="external">CVE-2026-29226</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29220" target="external">CVE-2026-29220</a>; affected releases before 24.09.06; fixed in 24.09.06</li> - <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29207" target="external">CVE-2026-29207</a>; affected releases before 24.09.06; fixed in 24.09.06</li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-46586" target="external">CVE-2026-46586</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1208"; target="external">#1208</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1210"; target="external">#1210</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45434" target="external">CVE-2026-45434</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1198"; target="external">#1198</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1200"; target="external">#1200</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-45187" target="external">CVE-2026-45187</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/1191"; target="external">#1191</a> and <a href="https://github.com/apache/ofbiz-framework/pull/1193"; target="external">#1193</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-41919" target="external">CVE-2026-41919</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1128"; target="external">#1128</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-35086" target="external">CVE-2026-35086</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1045"; target="external">#1045</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31986" target="external">CVE-2026-31986</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/6ba1356af67dbda4848f4c852b9ad8d3afb545c1"; target="external">6ba1356</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31910" target="external">CVE-2026-31910</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/b6ae5181cf13abcfc8e676e5ea9e912e4cc8313d"; target="external">b6ae518</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31909" target="external">CVE-2026-31909</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/dd823588254676e4eccb4e104d7a203946bfdf9e"; target="external">dd82358</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31906" target="external">CVE-2026-31906</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/85d0e5c8ccd6232afc3061c5f1ec134630536906"; target="external">85d0e5c</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31388" target="external">CVE-2026-31388</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/6b305e7ecc4480e67948a36dc5ebbbce82b78226"; target="external">6b305e7</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31387" target="external">CVE-2026-31387</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/730ad7b15fb288f4acfb04512872245eb6ac3343"; target="external">730ad7b</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31380" target="external">CVE-2026-31380</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/fee350530775d07b9b4ff4c3a37a289affe33b8e"; target="external">fee3505</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31379" target="external">CVE-2026-31379</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1158"; target="external">#1158</a> and commit <a href="https://github.com/apache/ofbiz-framework/commit/6b519ed9961833da7cedd1aadd232e3234aa8ad3"; target="external">6b519ed</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-31378" target="external">CVE-2026-31378</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/60c19683f908ebae9d169f6e4ff49869a74e728e"; target="external">60c1968</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29226" target="external">CVE-2026-29226</a>; affected releases before 24.09.06; fixed in 24.09.06 with PRs <a href="https://github.com/apache/ofbiz-framework/pull/989"; target="external">#989</a>, <a href="https://github.com/apache/ofbiz-framework/pull/991"; target="external">#991</a> and <a href="https://github.com/apache/ofbiz-framework/pull/994"; target="external">#994</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29220" target="external">CVE-2026-29220</a>; affected releases before 24.09.06; fixed in 24.09.06 with PR <a href="https://github.com/apache/ofbiz-framework/pull/1135"; target="external">#1135</a></li> + <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2026-29207" target="external">CVE-2026-29207</a>; affected releases before 24.09.06; fixed in 24.09.06 with commit <a href="https://github.com/apache/ofbiz-framework/commit/9734714eb81dc976680178f594994e4885fcd054"; target="external">9734714</a></li> <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-61623" target="external">CVE-2025-61623</a>; affected releases before 24.09.03; fixed in 24.09.03 with commits <a href="https://github.com/apache/ofbiz-framework/commit/4c624298a6"; target="external">4c624298a6</a>, <a href="https://github.com/apache/ofbiz-framework/commit/e8ad44dc36"; target="external">e8ad44dc36</a>, <a href="https://github.com/apache/ofbiz-framework/commit/505c88cf45"; [...] <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-59118" target="external">CVE-2025-59118</a>; affected releases before 24.09.03; fixed in 24.09.03 with commits <a href="https://github.com/apache/ofbiz-framework/commit/e1d30e8f55"; target="external">e1d30e8f55</a>, <a href="https://github.com/apache/ofbiz-framework/commit/cfee3063b1"; target="external">cfee3063b1</a>, <a href="https://github.com/apache/ofbiz-framework/commit/fd6a3b8644"; [...] <li><i class="icon-pin"></i> <a href="//cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2025-54466" target="external">CVE-2025-54466</a>; affected releases before 24.09.02; fixed in 24.09.02 with commit <a href="https://gitbox.apache.org/repos/asf?p=ofbiz-plugins.git;h=5a35b4f84f"; target="external">5a35b4f84f</a></li>
