Apache Sling Security Bundle

Mentions · 7d0
Mentions · 30d0
All mentions2
First seenSep 23, 2026
Last mentionedSep 23, 2026

Timeline

2 articles · newest first

CVE-2026-94251: Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource

Low-severity vulnerability in Apache Sling Security Bundle where ContentDispositionFilter misses certain resource address shapes, fixed in v1.3.12.

oss-securitySep 23, 15:50 UTC · Sep 23, 2026Vulnerability 7 sourcesCVE-2026-942511 · 1 read

CVE-2026-94243: Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence

Low-severity flaw in Apache Sling Security Bundle's RefererFilter accepting weak evidence, patched in version 1.3.2.

oss-securitySep 23, 15:47 UTC · Sep 23, 2026Vulnerability 7 sourcesCVE-2026-942432 · 1 read

Related CVEs

by mentions

CVE-2026-942437.3
CSRF Protection Bypass in Apache Sling Security Bundle ReferrerFilter
published Sep 23, 2026Apache Software Foundation Apache Sling Security Bundle
CVE-2026-942516.5
Content-Disposition filter bypass in Apache Sling Security Bundle before 1.3.12
published Sep 23, 2026Apache Software Foundation Apache Sling Security Bundle (ContentDispositionFilter)

Appears with

Apache Software Foundationorganization · 2
Apachevendor · 2
Claude Codeorganization · 1

Entities are extracted by the model from each article. First seen Sep 23, 2026, last mentioned Sep 23, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.