Skip to content

XWiki Platform has path traversal via resources parameter in ssx and jsx endpoints when using leading slash

Critical severity GitHub Reviewed Published May 20, 2026 in xwiki/xwiki-commons • Updated May 26, 2026

No open alerts for this advisory

Give feedback on Dependabot alerts