Apache Sling
Apache Sling Security Bundle Updates Address Two Filter Bypasses
09/23/2026
Apache Sling Security Bundle fixes RefererFilter and ContentDispositionFilter bypasses at different version floors. Choose a supported release containing both fixes and verify the active bundle; stopping at 1.3.2 leaves the later issue unresolved.
Apache Sling XSS 2.4.12 Addresses Five Sanitization and Resource Flaws
09/23/2026
Apache Sling XSS 2.4.12 addresses sanitization bypasses and XML resource-limit flaws. Update the deployed XSS bundle itself and review exposed input paths; a Sling platform version alone does not establish remediation.