org.wrensecurity.commons vulnerabilities

Products

• org.wrensecurity.commons/json-resource-http 1

Latest org.wrensecurity.commons CVEs

Newest publication first

1. CVE-2026-2102 XSS in wrensec-commons CREST framework HTTP binding via _mimeType parameter

   Published 2026-11-02

   Medium·CVSS 6.1 EPSS 0.27%

   wrensec-commons contains a reflected cross-site scripting (XSS) vulnerability in the CREST framework's HTTP binding. The HttpUtils.prepareResponse() method used the _mimeType request parameter to set the Content-Type response header without proper sanitization. By sending a GET r...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.