https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T03:34:29.680453+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-351710 EUVD-2026-351710 2026-10-13T03:34:29.756428+00:00 EUVD-2026-351710 https://cve.radiocsirt.org/vuln/fkie_cve-2026-69223 fkie_cve-2026-69223 2026-10-13T03:34:29.756464+00:00

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).

This issue affects Apache Allura: before 1.19.1.

Users are recommended to upgrade to version 1.19.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-q9jm-8x7q-2v2g GHSA-q9jm-8x7q-2v2g 2026-10-13T03:34:29.756501+00:00

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).

This issue affects Apache Allura: before 1.19.1.

Users are recommended to upgrade to version 1.19.1, which fixes the issue.

 https://cve.radiocsirt.org/vuln/jvndb-2026-000116 jvndb-2026-000116 2026-10-13T03:34:29.756538+00:00

Apache Allura provided by The Apache Software Foundation contains the vulnerability listed below:<a href='https://cwe.mitre.org/data/definitions/918.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-69223' target='_blank'></a><ul><li>Server-side request forgery (CWE-918) - CVE-2026-69223</li></ul>Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.