Robuta

https://www.openwall.com/lists/oss-security/2026/05/06/3 oss-security - CVE-2026-43646: Apache Wicket: crafted URLs can bypass PackageResourceGuard apache wicket