{"id":"CVE-2026-61899","aliases":[],"url":"https://o3.security/vulnerability/CVE-2026-61899","summary":"Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs.\nUsers are recommended to upgrade to…","details":"Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to download clsspath assets via specially crafted URLs.\nUsers are recommended to upgrade to version 5.9.1, which fixes this issue.","published":"2026-08-10T11:17:27.117","modified":"2026-08-10T11:17:27.117","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[],"fix":null,"references":[{"type":"WEB","url":"https://lists.apache.org/thread/6j3yojqrdsxkrfz52d0zjyrf5n9xttmw"}],"provenance":{"sources":["OSV.dev","NVD","FIRST.org (EPSS)"],"lastVerified":"2026-08-10T11:17:27.117"}}