{"schema_version": "1.6.1", "id": "CVE-2026-68536", "summary": "Server-Side Request Forgery / Local File Inclusion Vulnerability", "details": "Server-Side Request Forgery / Local File Inclusion in Apache MyFace Core.\n\nOlder unsupported versions may also be affected. \n\nUsers are recommended to upgrade to versions 2.3.12, 2.3-next-M9, 3.0.4, 4.0.4, or 4.1.4, which fix this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "2.2.0-beta"}, {"last_affected": "2.2.0-beta"}]}, {"type": "SEMVER", "events": [{"introduced": "2.3.0"}, {"last_affected": "2.3.0"}]}, {"type": "SEMVER", "events": [{"introduced": "2.3-next-M1"}, {"fixed": "2.3-next-M9"}]}, {"type": "SEMVER", "events": [{"introduced": "2.3.1"}, {"fixed": "2.3.12"}]}, {"type": "SEMVER", "events": [{"introduced": "3.0.0"}, {"fixed": "3.0.4"}]}, {"type": "SEMVER", "events": [{"introduced": "4.0.0"}, {"fixed": "4.0.4"}]}, {"type": "SEMVER", "events": [{"introduced": "4.1.0"}, {"fixed": "4.1.4"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/4kwh2dys1sdcm3o4pbk41t2lt9or72qq"}]}