You are viewing a plain text version of this content. The canonical link for it is here.

---

- [ANNOUNCE] Apache Allura 1.21.0 released - posted by Dave Brondsema <da...@brondsema.net> on 2026/09/03 17:27:06 UTC, 0 replies.
- CVE-2026-80180: Apache Allura: Stored XSS via markdown HTML processing - posted by Dave Brondsema <br...@apache.org> on 2026/09/03 17:33:52 UTC, 0 replies.
- CVE-2026-80181: Apache Allura: Server-side request forgery - posted by Dave Brondsema <br...@apache.org> on 2026/09/03 17:34:46 UTC, 0 replies.
- CVE-2026-80190: Apache Allura: Stored XSS via code repositories - posted by Dave Brondsema <br...@apache.org> on 2026/09/03 17:35:38 UTC, 0 replies.
- CVE-2026-81270: Apache Allura: Information exposure via search - posted by Dave Brondsema <br...@apache.org> on 2026/09/03 17:36:36 UTC, 0 replies.