Apache Software Foundation Apache Sling XSS

• CVE-2026-91928 Medium 6.1 Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms 0.6%
• CVE-2026-91852 Medium 6.1 Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl 0.8%
• CVE-2026-91999 Medium 6.1 Apache Sling XSS: Improper escaping in the XSS Webconsole plugin 0.6%
• CVE-2026-92001 Medium 6.1 Apache Sling XSS: Missing parser resource limits 0.6%
• CVE-2026-73192 Medium 6.1 Apache Sling XSS: XSS possible through XSSAPI.getValidHref() 0.6%