Vulnerability Bulletins

CVE-2026-69223

   
Affected software APACHE
 
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).

This issue affects Apache Allura: before 1.19.1.

Users are recommended to upgrade to version 1.19.1, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-69223