| CVE-2026-103866 |
Apache Sling Engine: Hand-rolled parameter parser diverges from RFC/container parsing, enabling smuggling
|
Non notée
|
5 nov. 2026 |
| CVE-2026-103864 |
Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization
|
Non notée
|
5 nov. 2026 |
| CVE-2026-103863 |
Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths
|
Non notée
|
5 nov. 2026 |
| CVE-2022-45064 |
The SlingRequestDispatcher doesn't correctly implement the RequestDispatcher API resulting in a generic type of…
|
8.0
Élevée
|
13 avr. 2023 |