Known vulnerabilities in apache-ivy

Vendor: Fedoraproject
Software: apache-ivy
Software CPE: cpe:2.3:o:fedoraproject:apache-ivy:*:*:*:*:*:fedora:*:*
Website: https://getfedora.org/
Total vulnerabilities: 5
Public exploits: 1
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache-ivy apache-ivy is affected by 5 known vulnerabilities: 3 high, 1 medium, 1 low Critical High Medium Low

Vulnerabilities (5)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU144731 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2026-26032		 CWE-22 Low
No
No
 2.6.0-2.fc43, 2.6.0-2.fc44 24.08.2026 SB20260824105
SB20260824106
SB20260824119
and 2 more
#VU86858 - Type confusion
CVE-2024-1939		 CWE-843 High
Available
No
 2.5.2-4.fc40 27.02.2024 SB2024022772
SB2024022953
SB2024030138
and 7 more
#VU86857 - Type confusion
CVE-2024-1938		 CWE-843 High
No
No
 2.5.2-4.fc40 27.02.2024 SB2024022772
SB2024022953
SB2024030138
and 7 more
#VU75501 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2022-37866		 CWE-22 Medium
No
No
 2.5.1-3.fc38 26.04.2023 SB2023042603
SB2023050803
SB2023051504
and 7 more
#VU75226 - Improper input validation
CVE-2022-37865		 CWE-20 High
No
No
 2.5.1-3.fc38 18.04.2023 SB20230418136
SB2023050803
SB2023051504
and 7 more