Skip to content

CVE record · 1 source

CVE-2026-118196

OAuth 1 rebinding vulnerability in Apache Allura.

Vendor: Apache Software Foundation
Product: Apache Allura
Weakness: CWE-863

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

20

CVE NVD 3h ago

OAuth 1 rebinding vulnerability in Apache Allura.

OAuth 1 rebinding vulnerability in Apache Allura. This issue affects Apache Allura: through 1.22.0. Users are recommended to upgrade to version 1.22.1, which fixes the issue.

Fix available CVE-2026-118196 Apache Software Foundation