Sling Security (Apache) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2026-09-23. Vendor: Apache.

CVEs of Sling Security

• CVE-2026-94243 - CVSS 7.3 (high), 2026-09-23: A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle:…
• CVE-2026-94251 - CVSS 6.5 (medium), 2026-09-23: A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling…