GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-pulsar-fips, pinot, druid, tez, pinot-fips...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-pulsar-fips, pinot, druid, tez, pinot-fips...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-pulsar-fips, pinot, druid, tez, pinot-fips...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-pulsar-fips, pinot, druid, tez, pinot-fips...

CLSA-2026-1788508154 TuxCare security update for org.springframework.pulsar (1 CVE)

TuxCare rebuilt 6 org.springframework.pulsar packages to address 1 CVE. Fixed in 1.2.13-tuxcare.4...

Malicious Package

Overview dagda-pulsar-redshift-remark is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization and this...

Malicious Package

Overview bellatrix-pulsar-bionics-cryovolcano is a malicious package. This package contains malicious code, and its content was removed from the official package manager. While this package might be attempting to impersonate a valid organization, there is no connection between that organization a...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-pulsar-fips, pinot, druid, tez, pinot-fips...

GHSA-M452-Q8C9-RG2F vulnerabilities

Vulnerabilities for packages: apache-pulsar, apache-pulsar-fips, pinot, druid, tez, pinot-fips...

CVE-2026-41732

CVE-2026-41732...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: tez, akhq, trino, celeborn, management-api-for-apache-cassandra-5.0, druid, wildfly, apicurio-registry, wavefront-proxy, thingsboard, spark, kserve-modelmesh, sonarqube, opensearch, keycloak, strimzi-kafka-operator, zipkin, infinispan, apache-pulsar, logstash, flyway...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: tez, akhq, trino, celeborn, management-api-for-apache-cassandra-5.0, druid, wildfly, apicurio-registry, wavefront-proxy, thingsboard, spark, kserve-modelmesh, sonarqube, opensearch, keycloak, strimzi-kafka-operator, zipkin, infinispan, apache-pulsar, logstash, flyway...

Insecure Trusted-Package Validation

Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...

CLSA-2026-1777941833 TuxCare security update for org.springframework.pulsar (2 CVEs)

TuxCare rebuilt 6 org.springframework.pulsar packages to address 2 CVEs. Fixed in 1.1.13-tuxcare.1...

The vulnerability affects Markdown preview extensions in enhanced code editors such as Visual Studio Code, Pulsar, and Atom. This allows attackers to execute arbitrary code.

The vulnerability of Markdown extension Preview Enhanced code editors like Visual Studio Code, Pulsar, and Atom is related to the lack of measures to neutralize special elements. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, seata, zipkin, keycloak, thingsboard, apache-hop, apache-hop-fips, pinot, request-9047-keycloak-fips, hadoop-fips, floci-az, neo4j, apache-pulsar-fips, floci, apicurio-registry-fips, keycloak-fips, pinot-fips,...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, seata, zipkin, keycloak, thingsboard, apache-hop, apache-hop-fips, pinot, request-9047-keycloak-fips, hadoop-fips, floci-az, neo4j, apache-pulsar-fips, floci, apicurio-registry-fips, keycloak-fips, pinot-fips,...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, seata, zipkin, keycloak, thingsboard, apache-hop, apache-hop-fips, pinot, request-9047-keycloak-fips, hadoop-fips, floci-az, neo4j, apache-pulsar-fips, floci, apicurio-registry-fips, keycloak-fips, pinot-fips,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-pulsar, management-api-for-apache-cassandra-5.0, seata, zipkin, keycloak, thingsboard, apache-hop, apache-hop-fips, pinot, request-9047-keycloak-fips, hadoop-fips, floci-az, neo4j, apache-pulsar-fips, floci, apicurio-registry-fips, keycloak-fips, pinot-fips,...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-pulsar, ranger, spark-fips, kafka-fips, kafka, apache-hop, apache-hop-fips, zookeeper, pinot, druid, hadoop-fips, spark-kubernetes-operator-fips, spark, scala, apache-pulsar-fips, confluent-kafka, confluent-kafka-jre-bcfips, pinot-fips, hadoop-client-modules,...