CRITICAL 9.1 CVE-2026-80181 Published 4 Sept 2026

Apache Allura Webhooks SSRF Vulnerability

Worried this affects one of your servers?

Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF).

Allura versions up to 1.20.0 are affected.

Upgrade to 1.21.0 to fix the issue.