CyberSecBulletin

Com.ritense.valtimo vulnerabilities

We track 2 vulnerabilities in Com.ritense.valtimo products across 4 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 14, 2026.

2vulnerabilities
1critical
1high
0exploited
8.3average CVSS score

Latest Com.ritense.valtimo vulnerabilities

  • 7.6 High severity

    valtimo: Insertion of Sensitive Information into Log File

    CVE-2026-44516Valtimo-platform

    Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body,

  • 9.1 Critical severity

    valtimo: Improper Control of Generation of Code

    CVE-2026-42555Valtimo-platform

    Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12.0.0 to before 12.32.0, com.ritense.valtimo:case from 13.0.0 to before 13.23.0, and com.ritense.valtimo:contract from 13.4.0 to before 13.23.0 evaluate Spring E