← All credits

Github user @dpfkdlemtp

1 vulnerability record and advisories credit this contributor.

CVE-2026-123765
Apache Sling XSS: xssAPI.getStyleToken() accepts markup in unquoted urls.