GHSA-fp43-vj7g-pg92

High

Advisory

Published 24 Jul 2026In the index since 6 Sept 2026

OmniFaces: Forged combined-resource IDs and related output/push boundaries

Carried by container images the latest versions of 3 of 17,781 indexed charts deploy, on 2 images.

Affected package	Affected versions	Fixed in	Images
omnifacesmaven	3.14.5, 4.0	3.14.23, 4.7.12	2

3 by stars

Chart

Latest

Affected images

Radar Score

janssenjanssen-auth-server

1 of the 8 container images this version deploys carry GHSA-fp43-vj7g-pg92.

Container image	Digest	Package	Fixed in
ghcr.io/janssenproject/jans/auth-server :0.0.0-nightly	7752874e71d8	omnifaces@4.0	4.7.12

1,068

gluugluu-flex

1 of the 9 container images this version deploys carry GHSA-fp43-vj7g-pg92.

Container image	Digest	Package	Fixed in
ghcr.io/janssenproject/jans/auth-server :0.0.0-nightly	7752874e71d8	omnifaces@4.0	4.7.12

1,507

jenainseefrlab

1 of the 1 container images this version deploys carry GHSA-fp43-vj7g-pg92.

Container image	Digest	Package	Fixed in
stain/jena-fuseki :latest	b1d0c96f19ad	omnifaces@3.14.5	3.14.23

1,262

2 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container image	Digest	Package	Fixed in	Used by
ghcr.io/janssenproject/jans/auth-server :0.0.0-nightly	7752874e71d8	omnifaces@4.0	4.7.12	2
stain/jena-fuseki :latest	b1d0c96f19ad	omnifaces@3.14.5	3.14.23	1