Most recent entries from all

EUVD-2026-351710

fkie_cve-2026-69223

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).

This issue affects Apache Allura: before 1.19.1.

Users are recommended to upgrade to version 1.19.1, which fixes the issue.

GHSA-q9jm-8x7q-2v2g

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).

This issue affects Apache Allura: before 1.19.1.

Users are recommended to upgrade to version 1.19.1, which fixes the issue.

jvndb-2026-000116

Apache Allura provided by The Apache Software Foundation contains the vulnerability listed below:<a href='https://cwe.mitre.org/data/definitions/918.html' target='_blank'></a><a href='https://www.cve.org/CVERecord?id=CVE-2026-69223' target='_blank'></a><ul><li>Server-side request forgery (CWE-918) - CVE-2026-69223</li></ul>Satoshi Ogawa of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.