org.jdbi vulnerabilities

Products

• org.jdbi/jdbi3-freemarker 1

Latest org.jdbi CVEs

Newest publication first

1. GHSA-mggx-p7jf-jgw4 jdbi3-freemarker Vulnerable to Improper Neutralization of Special Elements Used in FreeMarker Template Engine

   Published 2026-05-05

   High·CVSS 7.5

   Summary Description An Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336) vulnerability in Jdbi allows arbitrary command execution when an application using jdbi3-freemarker permits attacker-influenced text to reach FreemarkerEngine.parse() as templa...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.