CVE-2026-85720 vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, apache-pulsar-fips...

GHSA-XR57-GCX8-52HF vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, apache-pulsar-fips...

CVE-2026-85720 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

GHSA-XR57-GCX8-52HF vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, apache-pulsar-fips...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, apache-pulsar-fips...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, apache-pulsar-fips...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: tez, apache-pulsar, apache-pulsar-fips...

pulsar-docker-images-patch-CVE-2021-44228

Patcher les images pulsar avec la mise à niveau Apache Log4J 2.17.1 Couvre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Voir Log4J Security Vulnerabilities and upgrades pour plus d'informations. voir le Dockerfile pour la solution Construction et publication d'images docker...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: pinot, tez, apache-pulsar, pinot-fips, druid, apache-pulsar-fips...

GHSA-M452-Q8C9-RG2F vulnerabilities

Vulnerabilities for packages: pinot, tez, apache-pulsar, pinot-fips, druid, apache-pulsar-fips...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: celeborn, apache-activemq-artemis, keycloak, tez, kserve-modelmesh, flyway, spark, wavefront-proxy, opensearch, logstash, druid, infinispan, zipkin, akhq, trino, apache-pulsar, neo4j, thingsboard, wildfly, apicurio-registry, strimzi-kafka-operator,...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: celeborn, apache-activemq-artemis, keycloak, tez, kserve-modelmesh, flyway, spark, wavefront-proxy, opensearch, logstash, druid, infinispan, zipkin, akhq, trino, apache-pulsar, neo4j, thingsboard, wildfly, apicurio-registry, strimzi-kafka-operator,...

Insecure Trusted-Package Validation

Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: floci, knative-kafka-broker, apache-hop, apache-pulsar, management-api-for-apache-cassandra-5.0, keycloak, seata, tinkerpop, pinot-fips, apache-hop-fips, floci-az, hadoop-fips, keycloak-fips, tez, knative-kafka-broker-fips, apicurio-registry, neo4j, thingsboard,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: floci, knative-kafka-broker, apache-hop, apache-pulsar, management-api-for-apache-cassandra-5.0, keycloak, seata, tinkerpop, pinot-fips, apache-hop-fips, floci-az, hadoop-fips, keycloak-fips, tez, knative-kafka-broker-fips, apicurio-registry, neo4j, thingsboard,...