pkg:Maven/com.liferay:com.liferay.portal.vulcan.impl

4 total CVEs

✅ Check your installed version

All known vulnerabilities

  • —CVE-2025-43816Liferay Portal and DXP vulnerable to a memory leak
    from 0, < 5.0.115
  • —CVE-2025-43796Liferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack
    >= 5.0.7, < 5.0.105
  • —CVE-2025-43786Liferay Portal exposes ERC which can lead to exploit the time response attack
    >= 5.0.7, < 5.0.127
  • —CVE-2025-3602Liferay Portal does not limit the depth of a GraphQL queries
    from 0, < 5.0.103