CVE Intelligence

Apache Software Foundation Apache Sling Security Bundle vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Apache Software Foundation Apache Sling Security Bundle: 2 record(s), with affected versions and fixes.

CVE-2026-94251 Medium · 6.5 CWE-693 Sep 23, 2026
Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource
A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue.
CVE-2026-94243 High · 7.3 CWE-346 Sep 23, 2026
Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence
A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue.