Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2026-24343
8.8
HIGHCVSS v3
Published
February 10, 2026
Affected
1 project
Assigned by
Apache
Severity scale
010
Description
Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat. This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0. Users are recommended to upgrade to version 1.8.0, which fixes the issue.
apache/hertzbeat
GitHubAn AI-powered next-generation open source real-time observability system.
GitHubAn AI-powered next-generation open source real-time observability system.>= 1.7.1, < 1.8.0NVD