CVE-2022-23553: Alpine Project Alpine

High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days.

Alpine is a scaffolding library in Java. Alpine prior to version 1.10.4 allows URL access filter bypass. This issue has been fixed in version 1.10.4. There are no known workarounds.

Affected products

• Alpine Project Alpine: before 1.10.4 (fixed in 1.10.4)

Published 2022-12-28. Last modified 2026-06-17.