Vulnerability Bulletins

CVE-2026-80181

   
Affected software APACHE
 
Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).




This issue affects Apache Allura: through 1.20.0.



Users are recommended to upgrade to version 1.21.0, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-80181