Skip to content
OpenAdvisories
Critical · 9.1 CVE-2026-92119 EUVD-2026-97831GHSA-fc7h-2757-8pc7

Apache Allura: REST API Mass Assignment

Published Oct 12, 2026 · Updated Oct 16, 2026 · Assigned by apache

Vendor: Apache Software Foundation Product: Apache Allura

Description

REST API Mass Assignment vulnerability in Apache Allura.

This issue affects Apache Allura: through 1.21.0.

Users are recommended to upgrade to version 1.22.0, which fixes the issue.

Affected products

VendorProductAffectedFixed
Apache Software Foundation Apache Allura ≤ 1.21.0 —

References