Apache Software Foundation Apache FreeMarker

1 published vulnerability names this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2026-849392.2.0 – 2.3.34Apache FreeMarker, Apache FreeMarker: A malformed locale may be exploitable for path traversal attacksCRITICAL 9.10.9 %