Is the "Known Vulnerabilities" page out dated

Capabilities Security
1

Hi all,

We are looking the Liferay Vulnerabilities list and it seems that now the list is stalled:

https://liferay.dev/portal/security/known-vulnerabilities

There are only vulnerabilities from last year only CVE-2025-?? nothing visible for CVE-2026-?

So is the security situation so good that Liferay is now without known flaws at 2026 or the there is no work for looking new vulnerabilities at product or fixing them.

Cheers,

Sampsa

1 Answer

1
2

Hey @Sampsa - good to hear from you!

With some changes in personnel the CVEs are running a bit behind - I’ve been talking to the new team that is involved, and they’re working on getting this going again.

Sorry for the delays…

Cheers,

Ben