CVE-2026-84170 - Apache Wicket: Configured upload limits are not enforced by the standalone file upload resource
CVE ID :CVE-2026-84170 Published : Nov. 1, 2026, 10:22 p.m. | 39 minutes ago Description :Allocation of resources without limits or throttling in Apache Wicket. org.apache.wicket.markup.html.form.upload.resource.AbstractFileUploadResource is the server side of the form-less upload offered by...