oss-security·12d agoCVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist#apache#cve-2026-77883#information-disclosureCVE-2026-778832