Apache Sling Xss Protection Api vulnerabilities

• apache software foundation sling xss, apache sling xss protection api +1 more Apache Sling XSS: Sanitizer bypass, uncontrolled resource consumption and failure pf protection mechanisms CVE-2026-91928 6.1 MediumSeptember 23, 2026
• apache software foundation sling xss, apache sling xss protection api +1 more Apache Sling XSS: CWE-79 multiple raw-string break-outs and ReDOS in XSSImpl CVE-2026-91852 6.1 MediumSeptember 23, 2026
• apache software foundation sling xss, apache sling xss protection api +1 more Apache Sling XSS: Improper escaping in the XSS Webconsole plugin CVE-2026-91999 6.1 MediumSeptember 23, 2026
• apache software foundation sling xss, apache sling xss protection api +1 more Apache Sling XSS: Missing parser resource limits CVE-2026-92001 6.1 MediumSeptember 23, 2026
• apache software foundation sling xss, apache sling xss protection api +1 more Apache Sling XSS: XSS possible through XSSAPI.getValidHref() CVE-2026-73192 6.1 MediumSeptember 23, 2026
• apache sling xss protection api, sling xss protection api compat, apache software foundation sling +2 more Cross-site Scripting in Apache Sling XSS Protection API CVE-2017-15717 Fix available 6.1 MediumJanuary 10, 2018