CVE-2026-85720 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, tez, pinot...

GHSA-XR57-GCX8-52HF vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, tez, pinot...

CVE-2026-85720 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

GHSA-XR57-GCX8-52HF vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: apache-pulsar, tez...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, tez, pinot...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, tez, pinot...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, tez, pinot...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, apache-pulsar, tez, pinot...

pulsar-docker-images-patch-CVE-2021-44228

Parchear imágenes de pulsar con la actualización de Apache Log4J 2.17.1 Cubre CVE-2021-44228, CVE-2021-45046, CVE-2021-45105 CVE-2021-44832 Consulte Vulnerabilidades de seguridad y actualizaciones de Log4J para obtener más información. consulte el Dockerfile para la solución Construcción y envío ...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: druid, apache-pulsar-fips, tez, pinot, pinot-fips, apache-pulsar...

GHSA-M452-Q8C9-RG2F vulnerabilities

Vulnerabilities for packages: druid, apache-pulsar-fips, tez, pinot, pinot-fips, apache-pulsar...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, wildfly, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, akhq, tez, opensearch, apicurio-registry, trino, zipkin, neo4j,...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: keycloak, wavefront-proxy, wildfly, infinispan, logstash, apache-activemq-artemis, spark, management-api-for-apache-cassandra-5.0, celeborn, thingsboard, flyway, strimzi-kafka-operator, kserve-modelmesh, akhq, tez, opensearch, apicurio-registry, trino, zipkin, neo4j,...

Insecure Trusted-Package Validation

Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: apache-hop-fips, floci, hono, request-9047-keycloak-fips, keycloak, hadoop-fips, apicurio-registry-fips, apache-pulsar, apache-activemq-artemis, apache-pulsar-fips, pinot, apache-hop, tinkerpop, neo4j, apicurio-registry, zipkin, knative-kafka-broker-fips,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: apache-hop-fips, floci, hono, request-9047-keycloak-fips, keycloak, hadoop-fips, apicurio-registry-fips, apache-pulsar, apache-activemq-artemis, apache-pulsar-fips, pinot, apache-hop, tinkerpop, neo4j, apicurio-registry, zipkin, knative-kafka-broker-fips,...