Share on:

OpenICF 2.0.3 Released

What’s new

Addressed critical security vulnerabilities:
- CVE-2025-67030 - Plexus-Utils Directory Traversal vulnerability in extractFile method
- CVE-2026-0636 - Bouncy Castle LDAP injection
- CVE-2024-7254 - Unbounded recursion when parsing deeply nested SGROUP tags causes stack overflow DoS
Replace Nashorn with Rhino as JavaScript engine fallback
Update OpenDJ dependency to version 5.1.1

Full changeset (more details)