https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T09:15:22.529305+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-103866 fkie_cve-2026-103866 2026-11-06T09:15:22.554431+00:00

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors.

This issue affects Apache Sling Engine: before 3.0.4.

Users are recommended to upgrade to version 3.0.4, which fixes the issue.

 https://db.gcve.eu/vuln/ghsa-fh7f-x3gj-j2vv GHSA-fh7f-x3gj-j2vv 2026-11-06T09:15:22.554497+00:00

Inconsistent interpretation of HTTP requests ('HTTP Request/Response smuggling') vulnerability in Apache Sling Engine. The engine's query/form parser accepts non-standard percent-escapes, wrong charsets, and continues request processing on such errors.

This issue affects Apache Sling Engine: before 3.0.4.

Users are recommended to upgrade to version 3.0.4, which fixes the issue.