You are viewing a plain text version of this content. The canonical link for it is here.
- CVE-2026-94243: Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:22:59 UTC, 0 replies.
- CVE-2026-94251: Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:23:21 UTC, 0 replies.
- CVE-2026-91852: Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:24:43 UTC, 0 replies.
- CVE-2026-91928: Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:25:00 UTC, 0 replies.
- CVE-2026-91999: Apache Sling XSS: Improper escaping in the XSS Webconsole plugin - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:25:17 UTC, 0 replies.
- CVE-2026-92001: Apache Sling XSS: Missing parser resource limits - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:25:29 UTC, 0 replies.
- CVE-2026-73192: Apache Sling XSS: XSS possible through XSSAPI.getValidHref() - posted by Joerg Hoh <jo...@apache.org> on 2026/09/23 08:25:55 UTC, 0 replies.