AA
Product
Apache Allura
13
CVEs
0
On KEV
9.8
Max CVSS
3
New 30D
Severity mix
Critical 6High 1Medium 6Low 0
Watch
Add Apache Allura to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-73240 | 9.8 | Aug 12 | Apache Allura: Git command injection Affected: before 1.19.1 |
| CVE-2026-92120 | 9.1 | Oct 12 | Apache Allura: Oauth1 Replay Attack Affected: through 1.21.0 |
| CVE-2026-92119 | 9.1 | Oct 12 | Apache Allura: REST API Mass Assignment Affected: through 1.21.0 |
| CVE-2026-92116 | 9.1 | Oct 12 | Apache Allura: OAuth1 missing callback validation Affected: through 1.21.0 |
| CVE-2026-80181 | 9.1 | Sep 4 | Apache Allura: Server-side request forgery Affected: through 1.20.0 |
| CVE-2026-69223 | 9.1 | Aug 11 | Apache Allura: Server-side request forgery Affected: before 1.19.1 |
Showing 6