critical9.8
CVE-2026-73240
Specifically crafted inputs may lead to git argument injection in Apache Allura.
Impact
Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apache | Allura | before 1.19.1 |