Vulnerabilities (CVE)

Filtered by vendor Apache Subscribe
Filtered by product Sling Security
Total 2 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2026-94243 1 Apache 1 Sling Security 2026-10-06 N/A 7.3 HIGH
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue.
CVE-2026-94251 1 Apache 1 Sling Security 2026-10-06 N/A 6.5 MEDIUM
A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue.