CVE-2026-92119: mass assignment in the Apache Allura REST API

The advisory, republished as an automatic translation from the oss-sec feed and posted by Dave Brondsema on October 12, 2026, describes a mass assignment vulnerability in the Apache Allura REST API. According to the text, the problem affects versions up to 1.21.0, and the recommendation is to upgrade to 1.22.0, which fixes the flaw. The severity is rated as moderate. The identifier is CVE-2026-92119, and the advisory cites the public CVE record as a reference. To verify, consult the original advisory on the oss-sec feed and the official CVE record, both listed in the source item, and compare the version installed in your environment with the list of affected versions. This note does not replace the vendor's technical analysis. Relevance for Rota Nacional: the platform does not patch third-party software and does not integrate Allura. If your team uses a model to study the advisory or plan the upgrade, do not paste configurations, keys or customer data into the prompt.