Eclipse Foundation Mojarra vulnerabilities

• eclipse foundation mojarra Reflected XSS via client window id in URL client window mode CVE-2026-120421 6.1 MediumNovember 4, 2026
• eclipse mojarra In Eclipse Mojarra versions 2.3 and following, URL handing in `DefaultFaceletFactory` does not... CVE-2026-46581 7.5 HighAugust 5, 2026