{"items":[{"id":"CVE-2025-5878","published":"2025-06-29T11:11:47.327Z","updated":"2025-11-03T20:06:42.000Z","title":"ESAPI esapi-java-legacy SQL Injection Defense Encoder.encodeForSQL special element","severity":"MEDIUM","score":6.9,"vendor":"ESAPI","product":"esapi-java-legacy","kev":false,"epss":0.00494,"kevAdded":null},{"id":"CVE-2022-24891","published":"2022-04-27T00:00:00.000Z","updated":"2025-11-03T19:26:55.130Z","title":"Cross-site Scripting in org.owasp.esapi:esapi -- antisamy-esapi.xml configuration file","severity":"MEDIUM","score":5.4,"vendor":"ESAPI","product":"esapi-java-legacy","kev":false,"epss":0.01715,"kevAdded":null}]}