Package: mojarra Severity: grave Tags: security Justification: user security hole Hi, this was assigned CVE-2013-5855: https://java.net/jira/browse/JAVASERVERFACES-3150 Fix: https://java.net/projects/mojarra/sources/svn/revision/12793 Cheers, Moritz