Eclipse Rdf4j
Don't miss out!
Thousands of developers use stack.watch to stay informed.Get an email whenever new security vulnerabilities are reported in Eclipse Rdf4j.
By the Year
In 2026 there have been 1 vulnerability in Eclipse Rdf4j with an average score of 8.7 out of ten. Rdf4j did not have any published security vulnerabilities last year. That is, 1 more vulnerability have already been reported in 2026 as compared to last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2026 | 1 | 8.70 |
| 2025 | 0 | 0.00 |
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 0 | 0.00 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 2 | 10.00 |
It may take a day or so for new Rdf4j vulnerabilities to show up in the stats or in the list of recent security vulnerabilities. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Eclipse Rdf4j Security Vulnerabilities
Eclipse RDF4J <5.3.2: XML External Entity (XXE) Vulnerability in XML Parser
CVE-2026-15803
8.7 - High
- August 12, 2026
In Eclipse RDF4J, several XML parser entry points do not fully restrict XML External Entity (XXE) processing when parsing untrusted XML-based RDF data or query results, permitting DOCTYPE declarations, external entity references, and external DTD loading. This is due to an incomplete fix for CVE-2018-1000644: the earlier fix did not cover all parser entry points. The issue is resolved in RDF4J 5.3.2, which rejects or disables DOCTYPE declarations, external entities, and external DTD loading by default.
XXE
RDF4J 2.4.2 allows Directory Traversal via
CVE-2018-20227
- December 19, 2018
RDF4J 2.4.2 allows Directory Traversal via ../ in an entry in a ZIP archive.
Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files
CVE-2018-1000644
10 - Critical
- August 20, 2018
Eclipse RDF4j version < 2.4.0 Milestone 2 contains a XML External Entity (XXE) vulnerability in RDF4j XML parser parsing RDF files that can result in the disclosure of confidential data, denial of service, server side request forgery, port scanning. This attack appear to be exploitable via Specially crafted RDF file.
XXE
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Eclipse Rdf4j or by Eclipse? Click the Watch button to subscribe.
