News · via oss-security
CVE-2026-118196: Apache Allura: OAuth1 rebinding
Posted by Dave Brondsema on Nov 06 Severity: critical Affected versions: - Apache Allura through 1.22.0 Description: OAuth 1 rebinding vulnerability in Apache Allura. This issue affects Apache…