CVE-2013-4295

CVE-2013-4295 concerns the gadget renderer in Apache Shindig 2.5.0 for PHP, which is vulnerable to an XML External Entity (XXE) injection via an XML document containing an external entity declaration. This leads to information disclosure from the gadget rendering server. Affected: Apache Shindig ...

CVE-2026-66256

A deserialization of untrusted data vulnerability exists in Apache Shindig (all versions), specifically within the OpenSocial REST API via XStream deserialization . Attackers with access to the Shindig REST API can send specially-crafted requests to trigger arbitrary code execution on the server....