diff --git a/advisories/unreviewed/2026/08/GHSA-qx8r-cr7v-r5mp/GHSA-qx8r-cr7v-r5mp.json b/advisories/unreviewed/2026/08/GHSA-qx8r-cr7v-r5mp/GHSA-qx8r-cr7v-r5mp.json index 093e6938943c..4d07ccb6266a 100644 --- a/advisories/unreviewed/2026/08/GHSA-qx8r-cr7v-r5mp/GHSA-qx8r-cr7v-r5mp.json +++ b/advisories/unreviewed/2026/08/GHSA-qx8r-cr7v-r5mp/GHSA-qx8r-cr7v-r5mp.json @@ -1,7 +1,7 @@ { "schema_version": "1.4.0", "id": "GHSA-qx8r-cr7v-r5mp", - "modified": "2026-09-01T18:30:33Z", + "modified": "2026-09-02T07:20:51Z", "published": "2026-08-31T12:30:24Z", "aliases": [ "CVE-2026-71257" @@ -13,7 +13,65 @@ "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H" } ], - "affected": [], + "affected": [ + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.wicket:wicket-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "8.0.0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 8.18.0" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.wicket:wicket-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "9.0.0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 9.23.0" + } + }, + { + "package": { + "ecosystem": "Maven", + "name": "org.apache.wicket:wicket-core" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "10.0.0" + } + ] + } + ], + "database_specific": { + "last_known_affected_version_range": "<= 10.10.0" + } + } + ], "references": [ { "type": "ADVISORY", @@ -26,6 +84,10 @@ { "type": "WEB", "url": "http://www.openwall.com/lists/oss-security/2026/08/30/4" + }, + { + "type": "PACKAGE", + "url": "https://github.com/apache/wicket" } ], "database_specific": {