org.xwiki.commons:xwiki-commons-classloader-api vulnerabilities (Maven)

1 vulnerability.

• org.xwiki.commons:xwiki-commons-classloader-api Maven XWiki Platform: Path traversal via resources parameter in ssx and jsx endpoints when using leading slash CVE-2026-23734 Fix available EPSS 18.5% 9.3 CriticalMay 20, 2026