opencc JFlow vulnerabilities

Latest opencc JFlow CVEs

Newest publication first

1. CVE-2026-3813 opencc JFlow WF_CCForm.java Calculate injection

   Published 2026-03-09

   Medium·CVSS 5.3 EPSS 0.41%

   A vulnerability was identified in opencc JFlow up to 5badc00db382d7cb82dad231e6a866b18e0addfe. Affected by this vulnerability is the function Calculate of the file src/main/java/bp/wf/httphandler/WF_CCForm.java. Such manipulation leads to injection. The attack may be performed fr...

2. CVE-2026-2536 opencc JFlow Workflow WF_Admin_AttrFlow.java Imp_Done xml external entity reference

   Published 2026-02-16

   Medium·CVSS 5.3 EPSS 0.33%

   A vulnerability was determined in opencc JFlow up to 20260129. This affects the function Imp_Done of the file src/main/java/bp/wf/httphandler/WF_Admin_AttrFlow.java of the component Workflow Engine. This manipulation of the argument File causes xml external entity reference. The...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.