Vulnerability Bulletins

CVE-2026-80180

   
Affected software APACHE
 
Stored XSS via markdown HTML processing in Apache Allura.



This issue affects Apache Allura: from through 1.20.0.



Users are recommended to upgrade to version 1.21.0, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-80180