Apache Sling Security Bundle

2 known vulnerabilities in Apache Sling Security Bundle, with patch priority, exploit likelihood and the news covering them.

Latest vulnerabilities

  • CVE-2026-94251 CVSS 6.5 medium A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue…
  • CVE-2026-94243 CVSS 7.3 high A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling…