Vulnerability Bulletins

CVE-2026-80190

   
Affected software APACHE
 
Apache Allura: stored XSS via SVN code repositories.  Git repositories are not known to be affected.  The vulnerability is likely mitigated via default CSP headers.



This issue affects Apache Allura: through 1.20.0.



Users are recommended to upgrade to version 1.21.0, which fixes the issue.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-80190