org.apache.wicket:wicket-auth-roles vulnerabilities (Maven)

1 vulnerability.

• org.apache.wicket:wicket-auth-roles Maven Apache Wicket: possible session fixation using AuthenticatedWebSession CVE-2026-40010 Fix available 9.1 CriticalMay 6, 2026