CVE-2026-84939

A flaw was found in Apache FreeMarker. A remote attacker could exploit a path traversal vulnerability in the template loading mechanism by providing a specially crafted, malformed locale identifier. This is possible if the localized lookup configuration setting is enabled, which is the default...