Hi all, The security advisory for CVE-2026-49328 has now been published.[1]
Affected users are strongly encouraged to upgrade to Apache Fesod (Incubating) 2.0.2-incubating, which contains the fix for this issue. For environments where an immediate upgrade is not possible, users should take additional precautions when processing user-supplied URLs, including applying appropriate validation controls and restricting access to untrusted network destinations where feasible. Please refer to the published advisory for details regarding affected versions and remediation guidance. Thanks to the reporter for responsibly disclosing the issue and helping improve the security of the project. [1] https://lists.apache.org/thread/c1pb5b66h02p9tlrnfbwcgcz85v16fkj Best regards, Shuxin Pan The Apache Fesod (Incubating) Team --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
