https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 18:55:33 +0000 https://cve.radiocsirt.org/vuln/cve-2026-29207 <p><strong>Affected:</strong> Apache Software Foundation Apache OFBiz</p> <p>Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.</p> <p>This issue affects Apache OFBiz: before 24.09.06.</p> <p>Users are recommended to upgrade to version 24.09.06, which fixes the issue.</p> <p>Please note that in the updated version, &#34;Data Resource&#34; records with dataTemplateTypeId = &#34;FTL&#34; are no longer supported.</p> <p>Additionally, in the updated version, the &#34;Ecommerce Customer&#34; security group no longer includes content management grants. Users are advised to remove these permissions from any production site as well.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache OFBiz</p> <p>Improper Neutralization of Special Elements Used in a Template Engine vulnerability in Apache OFBiz.</p> <p>This issue affects Apache OFBiz: before 24.09.06.</p> <p>Users are recommended to upgrade to version 24.09.06, which fixes the issue.</p> <p>Please note that in the updated version, &#34;Data Resource&#34; records with dataTemplateTypeId = &#34;FTL&#34; are no longer supported.</p> <p>Additionally, in the updated version, the &#34;Ecommerce Customer&#34; security group no longer includes content management grants. Users are advised to remove these permissions from any production site as well.</p> https://cve.radiocsirt.org/vuln/cve-2026-29207