GHSA-XR57-GCX8-52HF vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar...

CVE-2026-85720 vulnerabilities

Vulnerabilities for packages: tez, druid, apache-pulsar...

GHSA-7GRG-JCF7-RPMX vulnerabilities

Vulnerabilities for packages: pinot, apache-pulsar, druid, tez, apache-pulsar-fips, pinot-fips...

CVE-2026-85721 vulnerabilities

Vulnerabilities for packages: pinot, apache-pulsar, druid, tez, apache-pulsar-fips, pinot-fips...

CVE-2026-85717 vulnerabilities

Vulnerabilities for packages: pinot, apache-pulsar, druid, tez, apache-pulsar-fips, pinot-fips...

GHSA-F8M2-889X-VW4X vulnerabilities

Vulnerabilities for packages: pinot, apache-pulsar, druid, tez, apache-pulsar-fips, pinot-fips...

GHSA-M452-Q8C9-RG2F vulnerabilities

Vulnerabilities for packages: pinot, apache-pulsar, druid, tez, apache-pulsar-fips, pinot-fips...

CVE-2026-55688 vulnerabilities

Vulnerabilities for packages: pinot, apache-pulsar, druid, tez, apache-pulsar-fips, pinot-fips...

CVE-2026-59903 vulnerabilities

Vulnerabilities for packages: infinispan, zipkin, kserve-modelmesh, trino, logstash, opensearch, akhq, celeborn, druid, strimzi-kafka-operator, wildfly, apicurio-registry, spark, tez, keycloak, neo4j, flyway, apache-pulsar, thingsboard, apache-activemq-artemis, sonarqube, wavefront-proxy,...

GHSA-8C42-7QJ2-3J46 vulnerabilities

Vulnerabilities for packages: infinispan, zipkin, kserve-modelmesh, trino, logstash, opensearch, akhq, celeborn, druid, strimzi-kafka-operator, wildfly, apicurio-registry, spark, tez, keycloak, neo4j, flyway, apache-pulsar, thingsboard, apache-activemq-artemis, sonarqube, wavefront-proxy,...

Insecure Trusted-Package Validation

Spring for Apache Pulsar is vulnerable to an insecure trusted-package validation. The vulnerability is due to JsonPulsarHeaderMapper using a prefix-based check for trusted packages and treating an empty trusted-packages configuration as trusting all packages, which allows an attacker to potential...

GHSA-Q6CQ-MHR2-JMR5 vulnerabilities

Vulnerabilities for packages: celeborn, tinkerpop, apache-activemq-artemis, request-9047-keycloak-fips, seata, management-api-for-apache-cassandra-5.0, apicurio-registry-fips, apache-hop, zipkin, knative-kafka-broker, keycloak-fips, hono, keycloak, knative-kafka-broker-fips, neo4j, thingsboard,...

CVE-2026-55851 vulnerabilities

Vulnerabilities for packages: celeborn, tinkerpop, apache-activemq-artemis, request-9047-keycloak-fips, seata, management-api-for-apache-cassandra-5.0, apicurio-registry-fips, apache-hop, zipkin, knative-kafka-broker, keycloak-fips, hono, keycloak, knative-kafka-broker-fips, neo4j, thingsboard,...

CVE-2026-59919 vulnerabilities

Vulnerabilities for packages: celeborn, tinkerpop, apache-activemq-artemis, request-9047-keycloak-fips, seata, management-api-for-apache-cassandra-5.0, apicurio-registry-fips, apache-hop, zipkin, knative-kafka-broker, keycloak-fips, hono, keycloak, knative-kafka-broker-fips, neo4j, thingsboard,...

GHSA-WH89-7897-X99H vulnerabilities

Vulnerabilities for packages: celeborn, tinkerpop, apache-activemq-artemis, request-9047-keycloak-fips, seata, management-api-for-apache-cassandra-5.0, apicurio-registry-fips, apache-hop, zipkin, knative-kafka-broker, keycloak-fips, hono, keycloak, knative-kafka-broker-fips, neo4j, thingsboard,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: kafka, confluent-kafka-jre-bcfips, apache-nifi, spark-kubernetes-operator, ranger, apache-hop, druid, kafka-fips, spark-kubernetes-operator-fips, confluent-kafka, spark, apache-camel-karavan-devmode, hadoop-client-modules, zookeeper, tez, pinot-fips, scala,...

CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: kafka, confluent-kafka-jre-bcfips, apache-nifi, spark-kubernetes-operator, ranger, apache-hop, druid, kafka-fips, spark-kubernetes-operator-fips, confluent-kafka, spark, apache-camel-karavan-devmode, hadoop-client-modules, zookeeper, tez, pinot-fips, scala,...