Skip to content
Valtimo-platform vulnerabilities
Newest
-
com.ritense.valtimo web, valtimo-platform valtimo +1 more
Valtimo: Sensitive data exposure through HTTP request/response logging in LoggingRestClientCustomizer
CVE-2026-44516
Fix available
7.6 High
-
com.ritense.valtimo case, contract, document +1 more +3 more
Valtimo: SpEL injection via StandardEvaluationContext allows Remote Code Execution by admin users
CVE-2026-42555
Fix available
9.1 Critical
-
valtimo-platform valtimo
Valtimo: Sensitive data exposure through inbox message logging in InboxHandlingService
CVE-2026-34164
Fix available
4.9 Medium
-
valtimo-platform valtimo-backend-libraries
Valtimo scripting engine can be used to gain access to sensitive data or resources
CVE-2025-58059
Fix available
9.1 Critical
-
valtimo-platform valtimo-backend-libraries
Valtimo backend libraries allows objects in the object-api to be accessed and modified by unauthorized users
CVE-2025-48881
Fix available
8.3 High
-
valtimo frontend-libraries, valtimo-platform valtimo-frontend-libraries +1 more
@valtimo/components exposes access token to form.io
CVE-2024-34706
Fix available
9.8 Critical