| CVE-2026-103866 |
Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling
|
Not rated
|
Nov 5, 2026 |
| CVE-2026-103864 |
Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization
|
Not rated
|
Nov 5, 2026 |
| CVE-2026-103863 |
Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths
|
Not rated
|
Nov 5, 2026 |
| CVE-2022-45064 |
The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of…
|
8.0
High
|
Apr 13, 2023 |