You are viewing a plain text version of this content. The canonical link for it is here.

---

- [ANNOUNCE] Apache Commons Secure XML 1.1.0 - posted by Gary Gregory <gg...@apache.org> on 2026/10/06 11:04:28 UTC, 0 replies.
- CVE-2026-94114: Apache Commons BCEL: Nested Code/Record attributes drive unbounded parse-time recursion in ClassParser - posted by "Gary D. Gregory" <gg...@apache.org> on 2026/10/06 19:38:04 UTC, 0 replies.
- CVE-2026-105111: Apache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSS - posted by "Gary D. Gregory" <gg...@apache.org> on 2026/10/06 19:38:23 UTC, 0 replies.
- Action Required: Apache Software Foundation - EU Cyber Resilience Act Supplier Compliance Review - Thermo Fisher Scientific - posted by "Global.Procurement.thermofisher.com via user" <us...@commons.apache.org> on 2026/10/06 20:02:07 UTC, 1 replies.
- [ANNOUNCE] Apache Commons Codec 1.23.0 - posted by Gary Gregory <gg...@apache.org> on 2026/10/11 16:17:02 UTC, 0 replies.
- [ANNOUNCE] Apache Commons JEXL 3.7.1 - posted by Gary Gregory <gg...@apache.org> on 2026/10/19 19:21:20 UTC, 0 replies.