# libowasp-esapi-java security updates

Patch Radar has 9 security fixes for libowasp-esapi-java, closing 3 CVEs. The newest is DLA-4246-1 (2.4.0.0-0+deb11u1), released July 21, 2025.

- Web page: https://patchblox.com/security/product/linux/libowasp-esapi-java
- Platform: Linux
- Supported: yes

## Security fixes, newest first

| Fix | Released | Fixed in | Priority | CVEs | Exploited |
|---|---|---|---|---:|---:|
| [DLA-4246-1](https://patchblox.com/security/data/fix/linux/dla-4246-1.md) | Jul 21, 2025 | Debian 11.6 (bullseye) 2.4.0.0-0+deb11u1 | High | 1 | 0 |
| [libowasp-esapi-java 2.1.0-3ubuntu0.18.04.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-libowasp-esapi-java-2.1.0-3ubuntu0.18.04.1-esm1.md) | Jun 29, 2025 | Ubuntu 18.04.6 LTS (bionic) 2.1.0-3ubuntu0.18.04.1~esm1 | High | 3 | 0 |
| [libowasp-esapi-java 2.1.0-3ubuntu0.20.04.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-focal-libowasp-esapi-java-2.1.0-3ubuntu0.20.04.1-esm1.md) | Jun 29, 2025 | Ubuntu 20.04 LTS (focal) 2.1.0-3ubuntu0.20.04.1~esm1 | High | 3 | 0 |
| [libowasp-esapi-java 2.2.3.1-1ubuntu0.1~esm1](https://patchblox.com/security/data/fix/linux/ubuntu-jammy-libowasp-esapi-java-2.2.3.1-1ubuntu0.1-esm1.md) | Jun 29, 2025 | Ubuntu 22.04.1 LTS (jammy) 2.2.3.1-1ubuntu0.1~esm1 | High | 3 | 0 |
| [libowasp-esapi-java 2.4.0.0-2ubuntu0.1](https://patchblox.com/security/data/fix/linux/ubuntu-noble-libowasp-esapi-java-2.4.0.0-2ubuntu0.1.md) | Jun 29, 2025 | Ubuntu 24.04.5 LTS (noble) 2.4.0.0-2ubuntu0.1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-24891](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24891.md) | Apr 27, 2022 | Debian 12.15 (bookworm) 2.4.0.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-24891](https://patchblox.com/security/data/fix/linux/debian-cve-2022-24891.md) | Apr 27, 2022 | Debian 13.5 (trixie) 2.4.0.0-1 | Routine | 1 | 0 |
| [DEBIAN-CVE-2022-23457](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23457.md) | Apr 25, 2022 | Debian 12.15 (bookworm) 2.4.0.0-1 | High | 1 | 0 |
| [DEBIAN-CVE-2022-23457](https://patchblox.com/security/data/fix/linux/debian-cve-2022-23457.md) | Apr 25, 2022 | Debian 13.5 (trixie) 2.4.0.0-1 | High | 1 | 0 |

---

Data as of 2026-11-07T00:32:44Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo