valtimo vulnerabilities

2 known vulnerabilities in valtimo from Valtimo-platform. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.6 High severity

  valtimo: Insertion of Sensitive Information into Log File

  CVE-2026-44516May 14, 2026Valtimo-platform

  Valtimo is an open-source business process automation platform. From 12.4.0 to 12.33.0 and 13.26.0, the LoggingRestClientCustomizer in the web module automatically intercepts all outgoing HTTP calls made via Spring's RestClient and logs the full request body,

• 9.1 Critical severity

  valtimo: Improper Control of Generation of Code

  CVE-2026-42555May 14, 2026Valtimo-platform

  Valtimo is an open-source business process automation platform. com.ritense.valtimo:document from 12.0.0 to before 12.32.0, com.ritense.valtimo:case from 13.0.0 to before 13.23.0, and com.ritense.valtimo:contract from 13.4.0 to before 13.23.0 evaluate Spring E