You are viewing a plain text version of this content. The canonical link for it is here.

---

- [ANNOUNCE] Apache Jackrabbit 2.23.6-beta released - posted by Julian Reschke <re...@apache.org> on 2026/10/07 08:29:57 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.22.5 released - posted by Julian Reschke <re...@apache.org> on 2026/10/07 08:32:58 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.20.18 released - posted by Julian Reschke <re...@apache.org> on 2026/10/07 08:34:55 UTC, 0 replies.
- CVE-2026-92414: Apache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokens - posted by Julian Reschke <re...@apache.org> on 2026/10/07 15:07:32 UTC, 0 replies.
- CVE-2026-92415: Apache Jackrabbit: DavEx client runs Class.forName + (String)-constructor on server-controlled error bodies - posted by Julian Reschke <re...@apache.org> on 2026/10/07 15:08:27 UTC, 0 replies.
- Apache Jackrabbit Security Releases: CVE-2026-92414 and CVE-2026-92415 - posted by Julian Reschke <re...@apache.org> on 2026/10/07 16:00:17 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 2.8.0 released - posted by Julian Reschke <re...@apache.org> on 2026/10/20 09:03:39 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.22.25 released - posted by Julian Reschke <re...@apache.org> on 2026/10/21 07:04:17 UTC, 0 replies.