pkg:Maven/com.liferay:com.liferay.portal.vulcan.impl

All known vulnerabilities

• —CVE-2025-43816Liferay Portal and DXP vulnerable to a memory leak
  from 0, < 5.0.115
• —CVE-2025-43796Liferay Portal: Missing Rate Limiting in GraphQL Endpoint Enables Resource Exhaustion Attack
  >= 5.0.7, < 5.0.105
• —CVE-2025-43786Liferay Portal exposes ERC which can lead to exploit the time response attack
  >= 5.0.7, < 5.0.127
• —CVE-2025-3602Liferay Portal does not limit the depth of a GraphQL queries
  from 0, < 5.0.103