org.dspace:dspace-api (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.dspace:dspace-api, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2021-41189 — CVSS 7.2 (high): DSpace is an open source turnkey repository application. In version 7.0, any community or collection administrator can escalate their…
• CVE-2022-31195 — CVSS 7.2 (high): DSpace open source software is a repository application which provides durable access to digital resources. In affected versions the…
• CVE-2025-53621 — CVSS 6.9 (medium): DSpace open source software is a repository application which provides durable access to digital resources. Two related XML External Entity…
• CVE-2025-53622 — CVSS 5.2 (medium): DSpace open source software is a repository application which provides durable access to digital resources. Prior to versions 7.6.4, 8.2…