Apache Software Foundation Apache Sling Security Bundle
- CVE-2026-94243 Apache Sling Security Bundle: RefererFilter accepts weaker-than-origin evidence 0.3%
- CVE-2026-94251 Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape of a resource 0.6%