CVE-2026-94243

The Apache Sling Security Bundle is vulnerable in versions prior to 1.3.2 due to a flaw in the ReferrerFilter , which accepts weaker-than-origin evidence. This vulnerability could allow for bypasses in security checks relying on the Referer header. Users are recommended to upgrade to version 1.3....