Advisories for Maven/Org.lucee/Lucee package

2025

Lucee RCE/XXE Vulnerability

The Lucee team received a responsible disclosure of a security vulnerability which affects all previous releases of Lucee. After reviewing the report and confirming the vulnerability, the Lucee team then conducted a further security review and found additional vulnerabilities which have been addressed as part of this this security update.

2021