← Back

Jakarta Expression Language

jakarta_expression_language

Vendor: Eclipse • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-28170
3Eclipse
OracleQuarkus
4Communications Cloud Native Core Policy
Jakarta Expression LanguageQuarkus+1 more
Jun 17, 2026
May 26, 2021
N/A· v4
5.3 MEDIUM· v3
5.0 MEDIUM· v2
In the Jakarta Expression Language implementation 3.0.3 and earlier, a bug in the ELParserTokenManager enables invalid EL expressions to be evaluated as if they were valid.