You are viewing a plain text version of this content. The canonical link for it is here.

---

- [ANNOUNCE] Apache Allura 1.22.0 released - posted by Dave Brondsema <da...@brondsema.net> on 2026/10/12 19:00:49 UTC, 0 replies.
- CVE-2026-92116: Apache Allura: OAuth1 missing callback validation - posted by Dave Brondsema <br...@apache.org> on 2026/10/12 19:03:02 UTC, 0 replies.
- CVE-2026-92119: Apache Allura: REST API Mass Assignment - posted by Dave Brondsema <br...@apache.org> on 2026/10/12 19:04:40 UTC, 0 replies.
- CVE-2026-92120: Apache Allura: Oauth1 Replay Attack - posted by Dave Brondsema <br...@apache.org> on 2026/10/12 19:05:43 UTC, 0 replies.