Threats affecting pkg:maven/org.apache.sling/org.apache.sling.security

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.3%	CVE-2026-94243Apache Sling Security Bundle · CWE-346 High7.3EPSS 0.3%2026-09-23CVE Database V5CVE-2026-94243 A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. This issue affects Apache Sling Security Bundle: before 1.3.2. Users are recommended to upgrade to version 1.3.2, which fixes the issue. EPSS 0.3%Vulnerability Apache Software Foundation CWE-346	CVE Database V5	2026-09-23
Medium	6.5	EPSS 0.6%	CVE-2026-94251Apache Sling Security Bundle · CWE-693 Medium6.5EPSS 0.6%2026-09-23CVE Database V5CVE-2026-94251 A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource This issue affects Apache Sling Security Bundle: before 1.3.12. Users are recommended to upgrade to version 1.3.12, which fixes the issue. EPSS 0.6%Vulnerability Apache Software Foundation CWE-693	CVE Database V5	2026-09-23

Page 1 of 1