Vulnerability Bulletins

CVE-2026-75099

   
Affected software APACHE
 
Unauthenticated REST disclosure of certain content items in Apache Allura.



This issue affects Apache Allura: through 1.19.1.



Users are recommended to upgrade to version 1.20.0, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-75099