You are viewing a plain text version of this content. The canonical link for it is here.

---

- [ANNOUNCE] Apache Wicket 10.10.0 released - posted by Andrea Del Bene <an...@gmail.com> on 2026/07/26 20:32:29 UTC, 1 replies.
- CVE-2026-66390: Apache Wicket: crafted Link URL strings can break out of the JavaScript sequence - posted by Pedro Henrique Oliveira dos Santos <pe...@apache.org> on 2026/07/27 16:21:24 UTC, 0 replies.
- CVE-2026-66391: Apache Wicket: leaked and missing CSP headers - posted by Pedro Henrique Oliveira dos Santos <pe...@apache.org> on 2026/07/27 16:21:44 UTC, 0 replies.