CVE-2026-94243

The Apache Sling Security Bundle is vulnerable to a security flaw where the ReferrerFilter accepts weaker-than-origin evidence. This issue affects all versions before 1.3.2 . To remediate this vulnerability, users are recommended to upgrade to version 1.3.2 . No specific exploit details or in-the...

CVE-2026-94251

The Apache Sling Security Bundle is vulnerable in versions prior to 1.3.12 due to a flaw where the ContentDispositionFilter mediates only one address/API shape of a resource. This issue allows for potential security bypasses or inconsistent filtering. Users are recommended to upgrade to version 1...