All News for December 2016

This section contains all news items published in December 2016.

CVE-2016-6793 Apache Wicket deserialization vulnerability

Severity: Low Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.x and 1.5.x Description: Depending on the ISerializer set in the Wicket application, it’s... more

Apache Wicket 8.0.0-M3 released

The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M3! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 7.6.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 7.6.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 6.26.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 6.26.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

All News for November 2016

This section contains all news items published in November 2016.

CVE-2016-6806 Apache Wicket CSRF detection vulnerability

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 6.20.0, 6.21.0, 6.22.0, 6.23.0, 6.24.0, 7.0.0, 7.1.0, 7.2.0, 7.3.0, 7.4.0 and 8.0.0-M1 Description: Affected... more

All News for October 2016

This section contains all news items published in October 2016.

Apache Wicket 8.0.0-M2 released

The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M2! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 7.5.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 7.5.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 6.25.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 6.25.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

All News for August 2016

This section contains all news items published in August 2016.

Wicket 1.5.16 released

This is the sixteenth maintenance release of the Wicket 1.5.x series. This release brings over 2 bug fixes. CHANGELOG for 1.5.16: Bug CVE-2013-2186: Disable (de)serialization... more

CVE-2016-3092 & CVE-2013-2186 Apache Commons Fileupload vulnerabilities

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: CVE-2016-3092: A malicious client can send file upload requests... more

All News for July 2016

This section contains all news items published in July 2016.

Apache Wicket 8.0.0-M1 released

The Apache Wicket PMC is proud to announce Apache Wicket 8.0.0-M1! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 7.4.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 7.4.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 6.24.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 6.24.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

All News for May 2016

This section contains all news items published in May 2016.

Apache Wicket 7.3.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 7.3.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

Apache Wicket 6.23.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 6.23.0! Apache Wicket is an open source Java component oriented web application framework that powers... more

All News for March 2016

This section contains all news items published in March 2016.

CVE-2015-7520 Apache Wicket XSS vulnerability

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: It is possible for JavaScript statements to break out... more

CVE-2015-5347 Apache Wicket XSS vulnerability

Severity: Important Vendor: The Apache Software Foundation Versions Affected: Apache Wicket 1.5.x, 6.x and 7.x Description: It is possible for JavaScript statements to break out... more

All News for February 2016

This section contains all news items published in February 2016.

Apache Wicket 6.22.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 6.22.0! This release marks another minor release of Wicket 6. We use semantic versioning for... more

Wicket 1.5.15 released

This is the fifteenth maintenance release of the Wicket 1.5.x series. This release brings over 2 bug fixes. CHANGELOG for 1.5.15: Bug [WICKET-6037] - ModalWindow... more

All News for January 2016

This section contains all news items published in January 2016.

Apache Wicket 7.2.0 released

The Apache Wicket PMC is proud to announce Apache Wicket 7.2.0! This release marks another minor release of Wicket 7. We use semantic versioning for... more