Haulmont vulnerabilities

Products

• Cuba Platform 3
• Jmix Framework 3
• Cuba Rest Api 2
• Jpa Web Api 2

Newest

• jmix-framework jmix, haulmont cuba platform, cuba rest api +2 more +4 more io.jmix.localfs:jmix-localfs affected by DoS in the Local File Storage CVE-2025-32952 Fix available 6.5 MediumApril 22, 2025
• jmix-framework jmix, haulmont cuba platform, cuba rest api +2 more +4 more io.jmix.rest:jmix-rest allows XSS in the /files Endpoint of the Generic REST API CVE-2025-32951 Fix available 6.4 MediumApril 22, 2025
• jmix-framework jmix, haulmont jmix framework +1 more io.jmix.localfs:jmix-localfs has a Path Traversal in Local File Storage CVE-2025-32950 Fix available 6.5 MediumApril 22, 2025
• haulmont cuba platform, reporting +1 more The Reporting Addon for CUBA Platform has Persistent XSS CVE-2018-20663 Fix available 5.4 MediumJanuary 3, 2019