News · via oss-security
CVE-2026-103864: Apache Sling Engine: Request-derived values reach log sinks without CR/LF neutralization
Posted by Joerg Hoh on Nov 05 Severity: low Affected versions: - Apache Sling Engine before 3.0.4 Description: Improper output neutralization for logs in Apache Sling Engine. This issue affects…