{"id":"CVE-2026-118196","published":"2026-11-09T11:17:21.273","lastModified":"2026-11-09T11:17:21.273","description":"OAuth 1 rebinding vulnerability in Apache Allura.\n\n\n\nThis issue affects Apache Allura: through 1.22.0.\n\n\n\nUsers are recommended to upgrade to version 1.22.1, which fixes the issue.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-863"],"vendors":[],"products":[],"references":[{"url":"https://lists.apache.org/thread.html/2x7c9741d50xw3o10h92rk19cr55trof","tags":[]},{"url":"http://www.openwall.com/lists/oss-security/2026/11/07/1","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":null}