GHSA-9cxr-76pm-j3wf
GitHub Security Advisory
Apache Wicket: An attacker can intentionally trigger a memory leak
✓ GitHub Reviewed
MODERATE
Has CVE
Advisory Details
The request handling in the core in Apache Wicket 7.0.0 on any platform allows an attacker to create a DOS via multiple requests to server resources.
Users are recommended to upgrade to versions 9.19.0 or 10.3.0, which fixes this issue.
Affected Packages
Maven
org.apache.wicket:wicket-core
Affected versions:
7.0.0
(fixed in 8.17.0)
Maven
org.apache.wicket:wicket-core
Affected versions:
10.0.0
(fixed in 10.3.0)
Maven
org.apache.wicket:wicket-core
Affected versions:
9.0.0-M1
(fixed in 9.19.0)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 10, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.