GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, apache-hop, floci-az, apache-pulsar-fips, zipkin, hono, apache-activemq-artemis, floci, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0, knative-kafka-broker-fips, keycloak-fips...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, zookeeper-fips, apache-hop-fips, apache-hop, kafka, apache-nifi, hadoop-client-modules, apache-pulsar-fips, hadoop-fips, druid, spark-fips, tez, apache-pulsar, kafka-fips, pinot-fips, spark, apache-camel-karavan-devmode, confluent-kafk...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, zookeeper-fips, apache-hop-fips, apache-hop, kafka, apache-nifi, hadoop-client-modules, apache-pulsar-fips, hadoop-fips, druid, spark-fips, tez, apache-pulsar, kafka-fips, pinot-fips, spark, apache-camel-karavan-devmode, confluent-kafk...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez, kafka, confluent-kafka, zookeeper, apache-nifi, druid...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez, kafka, confluent-kafka, zookeeper, apache-nifi, druid...

PYSEC-2026-901 Apache Pulsar Disabled Certificate Validation for OAuth Client Credential Requests makes C++/Python Clients vulnerable to MITM attack

The Apache Pulsar C++ Client does not verify peer TLS certificates when making HTTPS calls for the OAuth2.0 Client Credential Flow, even when tlsAllowInsecureConnection is disabled via configuration. This vulnerability allows an attacker to perform a man in the middle attack and intercept and/or...

GHSA-47QP-HQVX-6R3F vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, zookeeper-fips, apache-hop-fips, apache-hop, kafka, apache-nifi, hadoop-client-modules, apache-pulsar-fips, hadoop-fips, druid, spark-fips, tez, apache-pulsar, kafka-fips, pinot-fips, spark, apache-camel-karavan-devmode, confluent-kafk...

GHSA-2R2C-CX56-8933 vulnerabilities

Vulnerabilities for packages: spark-kubernetes-operator-fips, zookeeper-fips, apache-hop-fips, apache-hop, kafka, apache-nifi, hadoop-client-modules, apache-pulsar-fips, hadoop-fips, druid, spark-fips, tez, apache-pulsar, kafka-fips, pinot-fips, spark, apache-camel-karavan-devmode, confluent-kafk...

GHSA-W573-9FFJ-6FF9 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, cassandra-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, zookeeper-fips, kayenta-fips, apache-hop-fips, solr, apache-hop, kafka, apache-nifi, strimzi-kafka-operator-fips, apache-pulsar-fips, seata, zipkin,...

GHSA-676X-F7GG-47VC vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, commercial-elasticsearch, kayenta-fips, apache-hop-fips, opensearch-fips, apache-hop, apache-nifi, selenium, opensearch, strimzi-kafka-operator-fips, apache-pulsar-fip...

GHSA-5PVG-856G-CP85 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, commercial-elasticsearch, kayenta-fips, apache-hop-fips, opensearch-fips, apache-hop, apache-nifi, selenium, opensearch, strimzi-kafka-operator-fips, apache-pulsar-fip...

CVE-2026-45673 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, commercial-elasticsearch, kayenta-fips, apache-hop-fips, opensearch-fips, apache-hop, apache-nifi, selenium, opensearch, strimzi-kafka-operator-fips, apache-pulsar-fip...

CVE-2026-44893 vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, apache-hop-fips, apache-hop, apache-pulsar-fips, seata, zipkin, hono, apache-activemq-artemis, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0,...

GHSA-XMV7-R254-6Q78 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, commercial-elasticsearch, kayenta-fips, apache-hop-fips, opensearch-fips, apache-hop, apache-nifi, selenium, opensearch, strimzi-kafka-operator-fips, apache-pulsar-fip...

CVE-2026-45674 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, commercial-elasticsearch, kayenta-fips, apache-hop-fips, opensearch-fips, apache-hop, apache-nifi, selenium, opensearch, strimzi-kafka-operator-fips, apache-pulsar-fip...

GHSA-CC37-9Q2J-3HFV vulnerabilities

Vulnerabilities for packages: management-api-for-apache-cassandra-4.1, apache-hop-fips, apache-hop, apache-pulsar-fips, seata, zipkin, hono, apache-activemq-artemis, knative-kafka-broker, tez, apache-pulsar, celeborn, neo4j, pinot-fips, keycloak, management-api-for-apache-cassandra-5.0,...

CVE-2026-47691 vulnerabilities

Vulnerabilities for packages: s3proxy-fips, flyway-fips, management-api-for-apache-cassandra-4.1, spark-kubernetes-operator-fips, commercial-elasticsearch, kayenta-fips, apache-hop-fips, opensearch-fips, apache-hop, apache-nifi, selenium, opensearch, strimzi-kafka-operator-fips, apache-pulsar-fip...