766 matches found
CVE-2026-47691 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, sonarqube, keycloak, druid, kafbat-ui-fips, camunda, s3proxy-fips, management-api-for-apache-cassandra-4.1, hadoop-fips, knative-kafka-broker, apache-pulsar, apache-hop, kafka-bridge, opensearch-fips, spark-fips, elasticsearch-fips, s3proxy,...
GHSA-5X3R-WRVG-RP6Q vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, sonarqube, keycloak, druid, grpc-java-fips, camunda, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, hadoop-fips, wavefront-proxy, knative-kafka-broker, apache-pulsar, apache-hop, kafka-bridge, opensearch-fips, spark-fips,...
CVE-2026-45536 vulnerabilities
Vulnerabilities for packages: airbyte-server-fips, keycloak, druid, grpc-java-fips, camunda, kafbat-ui-fips, management-api-for-apache-cassandra-4.1, s3proxy-fips, zookeeper, hadoop-fips, wavefront-proxy, solr, apache-pulsar, apache-hop, spark-fips, s3proxy, zookeeper-fips, airbyte-server,...
GHSA-CC37-9Q2J-3HFV vulnerabilities
Vulnerabilities for packages: keycloak, management-api-for-apache-cassandra-4.1, hadoop-fips, knative-kafka-broker, apache-pulsar, apache-hop, knative-kafka-broker-fips, keycloak-fips, apache-activemq-artemis, apicurio-registry, management-api-for-apache-cassandra-4.0, celeborn, hono, thingsboard...
Deserialization of Untrusted Data
Overview org.springframework.pulsar:spring-pulsar is a Spring Pulsar Core Affected versions of this package are vulnerable to Deserialization of Untrusted Data via trusted package validation in JsonPulsarHeaderMapper. An attacker can trigger deserialization of unintended classes by supplying...
PT-2026-48328
Name of the Vulnerable Software and Affected Versions Spring for Apache Pulsar versions 1.1.0 through 1.1.17 Spring for Apache Pulsar versions 1.2.0 through 1.2.17 Spring for Apache Pulsar versions 2.0.0 through 2.0.5 Description JsonPulsarHeaderMapper uses a prefix check to match type headers...
CVE-2026-6860 vulnerabilities
Vulnerabilities for packages: spark, strimzi-kafka-operator, apache-pulsar, wildfly, keycloak, druid, apicurio-registry...
GHSA-3G76-F9XQ-8VP6 vulnerabilities
Vulnerabilities for packages: spark, strimzi-kafka-operator, apache-pulsar, wildfly, keycloak, druid, apicurio-registry...
This Week in Spring - May 5th, 2026
Hi, Spring fans! Welcome to another installment of This Week in Spring! It's May 5th, 2026, and I'm in Mainz, Germany, for the legendary JAX conference! It's been infinitely far too long since I've been at this amazing show, and I'm oh-so happy to be back here! Tonight, after my two talks here, I...
CVE-2026-40490 vulnerabilities
Vulnerabilities for packages: apache-pulsar, tez, druid...
CVE-2026-5598 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi, spark, jenkins, ruby4.0-bouncy-castle-java, logstash, jruby, gradle, kserve-modelmesh, ruby3.3-bouncy-castle-java, apache-pulsar, wildfly, thingsboard, druid, keycloak, ruby3.2-bouncy-castle-java, ruby3.4-bouncy-castle-java, sonarqube...
GHSA-P93R-85WP-75V3 vulnerabilities
Vulnerabilities for packages: zipkin, apache-nifi, spark, jenkins, ruby4.0-bouncy-castle-java, logstash, jruby, gradle, kserve-modelmesh, ruby3.3-bouncy-castle-java, apache-pulsar, wildfly, thingsboard, druid, keycloak, ruby3.2-bouncy-castle-java, ruby3.4-bouncy-castle-java, sonarqube...
GHSA-CMXV-58FP-FM3G vulnerabilities
Vulnerabilities for packages: apache-pulsar, tez, druid...
GHSA-CMXV-58FP-FM3G vulnerabilities
Vulnerabilities for packages: pinot, druid, apache-pulsar-fips, pinot-fips, tez, apache-pulsar...
CVE-2026-40490 vulnerabilities
Vulnerabilities for packages: pinot, druid, apache-pulsar-fips, pinot-fips, tez, apache-pulsar...
Exploit for CVE-2017-0144
EternalBlue-DoublePulsar-Exploit-Demonstration Cybersecurity l...
ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1106 more potentially affected by CVE-2026-34481 via org.apache.logging.log4j:log4j-layout-template-json (>=2.14.0, <=3.0.0-beta3)
org.apache.logging.log4j:log4j-layout-template-json MAVEN version =2.14.0, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =2.6.0-looktech.1, =4.9.0, =4.9.0, =4.9.0, =4.9.0, =4.9.2 and more Source cves: CVE-2026-34481 Source...
CVE-2026-24308 vulnerabilities
Vulnerabilities for packages: druid, zookeeper, solr, apache-pulsar, spark-fips, zookeeper-fips, apache-activemq-artemis, thingsboard, strimzi-kafka-operator, spark-kubernetes-operator, apache-nifi, apache-pulsar-fips, wso2is, tez, kserve-modelmesh, pinot, seata, kafka, trino, akhq,...
GHSA-CRHR-QQJ8-RPXC vulnerabilities
Vulnerabilities for packages: druid, zookeeper, solr, apache-pulsar, spark-fips, zookeeper-fips, apache-activemq-artemis, thingsboard, strimzi-kafka-operator, spark-kubernetes-operator, apache-nifi, apache-pulsar-fips, wso2is, tez, kserve-modelmesh, pinot, seata, kafka, trino, akhq,...
