com.ascentstream.pulsar:pulsar-bookkeeper-prometheus-metrics-provider (4.0.11.0), com.ascentstream.pulsar:pulsar-broker (4.0.11.0) +88 more potentially affected by CVE-2026-10050 via org.eclipse.jetty.ee8:jetty-ee8-security (>=12.1.0, <=12.1.9)

org.eclipse.jetty.ee8:jetty-ee8-security MAVEN version =12.1.0, =5.0.1, =5.0.3-beta and more Source cves: CVE-2026-10050 Source advisory: OSV:GHSA-2FVJ-HGJ9-J2GR...

EUVD-2024-0895

Malicious code in bioql PyPI...

CVE-2023-30429

Incorrect Authorization vulnerability in Apache Software Foundation Apache Pulsar. This issue affects Apache Pulsar: before 2.10.4, and 2.11.0. When a client connects to the Pulsar Function Worker via the Pulsar Proxy where the Pulsar Proxy uses mTLS authentication to authenticate with the Pulsar...

CVE-2022-24280

Improper Input Validation vulnerability in Proxy component of Apache Pulsar allows an attacker to make TCP/IP connection attempts that originate from the Pulsar Proxy's IP address. When the Apache Pulsar Proxy component is used, it is possible to attempt to open TCP/IP connections to any IP addre...

Improper Authentication

Apache Pulsar Proxy is vulnerable to Improper Authentication. The vulnerability is caused due to missing authorization checks in the /proxy-stats endpoint. This can lead to unauthorized access this sensitive endpoints, allowing attackers to view detailed connection statistics and potentially...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: OSV:GHSA-C35H-W8HJ-MM55...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...

GHSA-C35H-W8HJ-MM55 Apache Pulsar: Improper Authentication for Pulsar Proxy Statistics Endpoint

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

Authentication flaw

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...

CVE-2022-34321

Improper Authentication vulnerability in Apache Pulsar Proxy allows an attacker to connect to the /proxy-stats endpoint without authentication. The vulnerable endpoint exposes detailed statistics about live connections, along with the capability to modify the logging level of proxied connections...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...