Skip to main content
Jahia Store
EN

Request Safety Patch

supported
Download 1.8.0

Information

Module ID
request-safety-patch
Group ID
org.jahia.modules
Status
supported
Category
Security
Author
JSG
Developer website
http://www.jahia.com
Requires Jahia
8.0.0.0
Updated
2026-07-17
Source
scm:git:git@github.com:Jahia/request-safety-patch.git
Tags
  • security

This module protects against two security vulnerabilities discovered in Jahia and documented on the Academy: https://academy.jahia.com/customer-center/security/security-advisories/security-patch-june-2026-jahia

Versions

Improvements

Hardened the /atmosphere X-Atmosphere-Post-Body block to scan the raw query string

Requires Jahia 8.0.0.0Updated 2026-07-15

Improvements

Closed an additional /atmosphere bypass using a GET request

Requires Jahia 8.0.0.0Updated 2026-07-14

Improvements

Escapes nt:base link view params and pause HTML externalization filter

Requires Jahia 8.0.0.0Updated 2026-07-14

Improvements

  • Closed /atmosphere/rpc filter bypass
Requires Jahia 8.0.0.0Updated 2026-06-26

Initial version of the module

Requires Jahia 8.0.0.0Updated 2026-06-01
1.2.0draftDownload

Initial release of the module.

Requires Jahia 8.0.0.0Updated 2026-05-30