CVE-2026-61899

概要

参考情報

• lists.apache.org/thread/6j3yojqrdsxkrfz52d0zjyrf5n9xttmw · Vendor Advisory
• openwall.com/lists/oss-security/2026/08/08/2 · Mailing List

tapestry のその他の脆弱性

• CVE-2022-46366緊急 9.8Apache Tapestry 3.x allows deserialization of untrusted data, leading to remote code execution. This issue is similar to but distinct from C…
• CVE-2022-31781高 7.5Apache Tapestry up to version 5.8.1 is vulnerable to Regular Expression Denial of Service (ReDoS) in the way it handles Content Types. Speci…
• CVE-2021-30638高 7.5Information Exposure vulnerability in context asset handling of Apache Tapestry allows an attacker to download files inside WEB-INF if using…
• CVE-2021-27850緊急 9.8A critical unauthenticated remote code execution vulnerability was found all recent versions of Apache Tapestry. The affected versions inclu…
• CVE-2020-17531緊急 9.8A Java Serialization vulnerability was found in Apache Tapestry 4. Apache Tapestry 4 will attempt to deserialize the "sp" parameter even bef…