This is an automated email from the ASF dual-hosted git repository.
joerghoh pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/sling-site.git
The following commit(s) were added to refs/heads/master by this push:
new f30e5b394 added today's security advisories
f30e5b394 is described below
commit f30e5b394a99a9737c01b8d7492d7ee040d98dd0
Author: Joerg Hoh <[email protected]>
AuthorDate: Wed Sep 23 14:03:28 2026 +0200
added today's security advisories
---
src/main/jbake/content/news.md | 3 +++
1 file changed, 3 insertions(+)
diff --git a/src/main/jbake/content/news.md b/src/main/jbake/content/news.md
index af12a323b..6209e2c9e 100644
--- a/src/main/jbake/content/news.md
+++ b/src/main/jbake/content/news.md
@@ -5,6 +5,9 @@ tags=news
tableOfContents=false
~~~~~~
+* Security Advisories for Apache Sling XSS:
[CVE-2026-73192](https://www.cve.org/CVERecord?id=CVE-2026-73192),
[CVE-2026-92001](https://www.cve.org/CVERecord?id=CVE-2026-92001),
[CVE-2026-91999](
+https://www.cve.org/CVERecord?id=CVE-2026-91999),
[CVE-2026-91928](https://www.cve.org/CVERecord?id=CVE-2026-91928) and
[CVE-2026-91852](https://www.cve.org/CVERecord?id=CVE-2026-91852) (September
23, 2026)
+* Security Advisories for Apache Sling Security:
[CVE-2026-94243](https://www.cve.org/CVERecord?id=CVE-2026-94243) and
[CVE-2026-94251](https://www.cve.org/CVERecord?id=CVE-2026-94251) (September
23, 2026)
* Released [Apache Sling 14](/news/sling-14-released.html) (March 9th, 2026).
* Security Advisory: [Apache Sling advisory regarding
CVE-2025-66516](./security/CVE-2025-66516.html)
* Apache Sling now supports Jakarta Servlet API 6.1 (June 28th)
