pkg:Maven/org.dspace:dspace-api

All known vulnerabilities

• HIGH7.2CVE-2022-31195DSpace ItemImportService API Vulnerable to Path Traversal in Simple Archive Format Package Import
  >= 4.0, < 5.11
• HIGH7.2CVE-2021-41189Communities and collections administrators can escalate their privilege up to system administrator
  >= 7.0, < 7.1
• MEDIUM6.9CVE-2025-53621DSpace is vulnerable to XML External Entity injection during archive imports
  from 0, < 7.6.4
• MEDIUM5.2DSpace is vulnerable to Path Traversal attacks when importing packages using Simple Archive Format
  from 0, < 7.6.4