org.apache.wicket:wicket-parent vulnerabilities (Maven)

2 vulnerabilities.

• org.apache.wicket:wicket-parent Maven Apache Wicket: crafted strings can break out of the JavaScript sequence CVE-2026-42509 Fix available 6.1 MediumMay 6, 2026
• org.apache.wicket:wicket-parent Maven Apache Wicket: crafted URLs can bypass PackageResourceGuard CVE-2026-43646 Fix available 7.5 HighMay 6, 2026