Apache Sis (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 2 in the last 30 days, 1 known versions, newest CVE from 2026-10-26. Vendor: Apache Software Foundation.

CVEs of Apache Sis

• CVE-2026-110748, 2026-10-26: This issue affects Apache SIS from version 0.7 through 1.6 inclusive. When a data file contains links to other files, Apache SIS opened these files regardless…
• CVE-2026-110733 - CVSS 5.4 (medium), 2026-10-26: Vulnerability in the SQL storage module of Apache SIS. When sorting a stream of features, the clause is copied after ORDER BY without quoting the identifier…
• CVE-2025-68280 - CVSS 6.5 (medium), 2026-01-05: Improper Restriction of XML External Entity Reference vulnerability in Apache SIS. It is possible to write XML files in such a way that, when parsed by Apache…