CVE-2026-108088

This vulnerability affects all versions of Apache Cocoon , which is a retired project. The issue is a cross-user cache poisoning (CWE-524) where cached values containing sensitive information from one user could be served to other users in a multi-user application. Because the project is retired,...