NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#allura

0 stories this week · 3 this month · 3 in 6 months · mostly security

Stories per day · 30 days

Relatedapache3 oauth2 callback-validation1 cve-2026-921161 cve-2026-921191 cve-2026-921201 mass-assignment1 replay-attack1 rest-api1

2 stories, newest first · one card per story

oss-security18d ago

CVE-2026-92120: Apache Allura: Oauth1 Replay Attack

Apache Allura is affected by a low-severity OAuth1 replay attack tracked as CVE-2026-92120.

1

oss-security18d agohigh

CVE-2026-92116: Apache Allura: OAuth1 missing callback validation

Apache Allura OAuth1 callback validation flaw CVE-2026-92116 is rated important.

2 sources apache allura

4