org.apache.syncope.core:syncope-core-spring vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.syncope.core:syncope-core-spring Maven Apache Syncope: Post-auth RCE via Groovy static CVE-2026-42782 Fix available 7.2 HighMay 25, 2026
• org.apache.syncope.core:syncope-core-spring Maven Apache Syncope: Remote Code Execution by delegated administrators CVE-2025-57738 Fix available EPSS 23.2% 7.2 HighOctober 20, 2025