Maven org.owasp.antisamy:antisamy

Name: Maven org.owasp.antisamy:antisamy
Brand: Maven

productUS

pkg:maven/org.owasp.antisamy/antisamy

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

critical

by severity

0critical0high7medium0low

updated 2026-10-28

vulnerabilities (8)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2016-10006US	medium6.1	2.35% (84th)	Exploit	1.5.5	2016-12-24	< 1.5.5
CVE-2017-14735US	medium6.1	1.66% (77th)	Exploit	1.5.7	2017-09-25	< 1.5.7
CVE-2022-29577US	medium6.1	1.33% (71st)	Exploit	1.6.7	2022-04-21	< 1.6.7
CVE-2021-35043US	medium6.1	1.51% (74th)	—	1.6.4	2021-07-19	1.5.7 → 1.6.4
CVE-2022-28367US	medium6.1	1.01% (63rd)	—	1.6.6	2022-04-21	< 1.6.6
CVE-2023-43643US	medium6.1	0.54% (45th)	—	1.7.4	2023-10-09	< 1.7.4
CVE-2024-23635US	medium6.1	0.37% (31st)	—	1.7.5	2024-02-02	< 1.7.5
CVE-2018-1000643US	—	—	—	no fix	2018-08-20	≤ 1.5.7

The flaw types (CWEs) most of these CVEs share.

CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')7 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.