Apache Allura

Search everything

Mentions · 7d0
Mentions · 30d3
All mentions3
First seenOct 12, 2026
Last mentioned18d ago

Timeline

3 articles · newest first

CVE-2026-92120: Apache Allura: Oauth1 Replay Attack

Apache Allura is affected by a low-severity OAuth1 replay attack tracked as CVE-2026-92120.

oss-securityOct 12, 20:09 UTC · 18d agoVulnerabilityCVE-2026-921201 · 1 read

CVE-2026-92119: Apache Allura: REST API Mass Assignment

Apache Allura has a moderate-severity REST API mass-assignment flaw, CVE-2026-92119.

oss-securityOct 12, 20:07 UTC · 18d agoVulnerability 2 sourcesCVE-2026-921192 · 2 reads

CVE-2026-92116: Apache Allura: OAuth1 missing callback validation

Apache Allura OAuth1 callback validation flaw CVE-2026-92116 is rated important.

oss-securityOct 12, 20:05 UTC · 18d agoVulnerability 2 sourcesCVE-2026-921164 · 1 read

Related CVEs

by mentions

CVE-2026-921199.1
REST API Mass Assignment in Apache Allura
published 18d agoApache Allura
CVE-2026-921209.1
OAuth1 request replay in Apache Allura
published 18d agoApache Allura
CVE-2026-921169.1
OAuth1 callback validation flaw in Apache Allura
published 18d agoApache Allura

Appears with

Apache Software Foundationorganization · 3
Apachevendor · 3

Entities are extracted by the model from each article. First seen Oct 12, 2026, last mentioned 18d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.