Unrated

Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions

CVE-2026-24343 First seen on SecPulse Feb 10, 18:28

Original description The description as published by the source.

Improper Neutralization of Data within XPath Expressions ('XPath Injection') vulnerability in Apache HertzBeat.

This issue affects Apache HertzBeat: from 1.7.1 before 1.8.0.

Users are recommended to upgrade to version 1.8.0, which fixes the issue.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

References

NVD OSV