Apache Tapestry vulnerabilities

• apache tapestry Timing attack on HMAC signature comparison in Apache Tapestry CVE-2019-10071 Fix available 9.8 CriticalSeptember 16, 2019
• apache tapestry Path traversal attack on Windows platforms CVE-2019-0207 Public exploitFix available 7.5 HighSeptember 16, 2019