Apache Jena Fuseki vulnerabilities

Latest Apache Jena Fuseki CVEs

Newest publication first

1. CVE-2026-61372 Apache Jena Fuseki: Web requests using SPARQL Update can escape file restrictions

   Published 2026-08-03

   High·CVSS 7.5

   Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki. This issue affects Apache Jena Fuseki: through 6.1.0. Users are recommended to upgrade to version 6.2.0, which fixes the issue.

2. CVE-2021-33192 Display information UI XSS

   Published 2021-07-05

   Medium·CVSS 6.1 EPSS 2.9%

   A vulnerability in the HTML pages of Apache Jena Fuseki allows an attacker to execute arbitrary javascript on certain page views. This issue affects Apache Jena Fuseki from version 2.0.0 to version 4.0.0 (inclusive).

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.