com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: OSV:GHSA-2FVJ-HGJ9-J2GR...

EUVD-2024-0895

Malicious code in bioql PyPI...

CVE-2023-30429

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: before 2.10.4, and 2.11.0. When a client connects to the Pulsar Function Worker via the Pulsar Proxy where the Pulsar Proxy uses mTLS authentication to authenticate with the Pulsar...

CVE-2022-24280

Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection attempts that originate from the Pulsar Proxy's IP address. When the Apache Pulsar Proxy component is used, it is possible to attempt to open TCP/IP connections to any IP addre...

Improper Authentication

Apache Pulsar Proxy is vulnerable to Improper Authentication. The vulnerability is caused due to missing authorization checks in the /proxy-stats endpoint. This can lead to unauthorized access this sensitive endpoints, allowing attackers to view detailed connection statistics and potentially...

GHSA-C35H-W8HJ-MM55 Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...

Authentication flaw

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

CVE-2022-34321

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...