VYPR
← All advisories
High severity7.5NVD Advisory· Published Aug 10, 2026· Updated Aug 18, 2026

CVE-2026-61899

CVE-2026-61899

Description

Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs. Users are recommended to upgrade to version 5.9.1, which fixes this issue.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Apache/Tapestryllm-fuzzy2 versions
    >=5.5.0, <5.9.1+ 1 more
    • (no CPE)range: >=5.5.0, <5.9.1
    • cpe:2.3:a:apache:tapestry:*:*:*:*:*:*:*:*range: >=5.5.0,<5.9.1

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.