oss-security·12d agoCVE-2026-77883: Apache Syncope: Information disclosure via one-hop JEXL navigation past the JexlContextBuilder name denylist#apache#cve-2026-77883#information-disclosureCVE-2026-778832
oss-security·18d ago highCVE-2026-41870: Apache Nutch: Unauthenticated remote code execution (RCE) via JEXL injection in Nutch Server (Nutch REST API)#apache#code-injection#jexlCVE-2026-41870 3 sources1