| Version | Supported Until |
|---|---|
| >= 3.29 | Unsupported |
| 3.30 | 27/06/2027 |
| 3.31 | 30/04/2029 |
| 3.32 | Unsupported |
| 3.33 | Unsupported |
| 4.0 | Best effort |
Please do not open a public GitHub issue to report a vulnerability. Instead, create a new security advisory.
Security: mapfish/mapfish-print
Security
SECURITY.md
-
XXE on MapFish Print allows reading arbitrary files of certain typesGHSA-5v29-34h8-v68r published
Jun 22, 2026 by sbrunnerHigh -
Remote Code Injection (RCE) in Dynamic tableGHSA-q7m6-wpvf-mvwx published
May 8, 2026 by sbrunnerCritical -
Address a Spring Framework CVEGHSA-5f67-qgrr-wmxj published
Apr 5, 2022 by sbrunnerCritical -
No more used JSONP vulnerabilitiesGHSA-w534-q4xf-h5v2 published
Jul 6, 2020 by sbrunnerLow -
Untrusted XML filesGHSA-vjv6-gq77-3mjw published
Jul 6, 2020 by sbrunnerLow
Learn more about advisories related to mapfish/mapfish-print in the GitHub Advisory Database