CVE-2023-26513: Excessive Iteration

March 20, 2023

Excessive Iteration vulnerability in Apache Software Foundation Apache Sling Resource Merger.This issue affects Apache Sling Resource Merger: from 1.2.0 before 1.4.2.

References

github.com/advisories/GHSA-rwrx-x2hw-9h5w
issues.apache.org/jira/browse/SLING-11776
lists.apache.org/thread/xpcpo1y88ldss5hgmvogsf6h3735l5zb
nvd.nist.gov/vuln/detail/CVE-2023-26513

Code Behaviors & Features

Detect and mitigate CVE-2023-26513 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →