Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, w…

提示

CVECVE-2026-61899

首次发现2026-08-10 12:15 UTC

披露时间2026-08-10 11:17 UTC

最后更新2026-08-10 12:15 UTC

通道状态auto

摘要

Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue.

中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。

深度研判 · 自动通道

该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。

数据来源

NVD DATABASE

原始链接

https://lists.apache.org/thread/6j3yojqrdsxkrfz52d0zjyrf5n9xttmw

时间线

2026-08-10 nvd_ingest NVD