io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3) +4 more potentially affected by CVE-2024-27135 via org.apache.pulsar:pulsar-functions-worker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-functions-worker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-27135 Source advisory: MEND:CVE-2024-27135...

org.apache.pulsar:pulsar-broker (>=3.1.0, <=3.1.2), org.apache.pulsar:pulsar-broker-auth-athenz (>=3.1.0, <=3.1.2) +3 more potentially affected by CVE-2024-27135 via org.apache.pulsar:pulsar-functions-worker (>=3.1.0, <=3.1.2)

org.apache.pulsar:pulsar-functions-worker MAVEN version =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.0, =3.1.2 Source cves: CVE-2024-27135 Source advisory: MEND:CVE-2024-27135...

org.apache.pulsar:pulsar-docker-image (>=2.6.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.6.0, <=2.10.5) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.6.0, <=2.10.5)

org.apache.pulsar:pulsar-proxy MAVEN version =2.6.0, =2.6.0, =2.6.0, =2.10.5 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-proxy MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (3.1.0)

org.apache.pulsar:pulsar-proxy MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-proxy and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2022-34321 Source advisory:...

org.apache.pulsar:pulsar-server-distribution (>=2.11.0, <=2.11.2) potentially affected by CVE-2022-34321 via org.apache.pulsar:pulsar-proxy (>=2.11.0, <=2.11.2)

org.apache.pulsar:pulsar-proxy MAVEN version =2.11.0, =2.11.0, =2.11.2 Source cves: CVE-2022-34321 Source advisory: MEND:CVE-2022-34321...

org.apache.pulsar:pulsar-broker-auth-athenz (3.2.0), org.apache.pulsar:pulsar-broker-auth-sasl (3.2.0) +2 more potentially affected by CVE-2024-28098 via org.apache.pulsar:pulsar-broker (3.2.0)

org.apache.pulsar:pulsar-broker MAVEN version 3.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker and may be impacted: - org.apache.pulsar:pulsar-broker-auth-athenz 3.2.0 - org.apache.pulsar:pulsar-broker-auth-sasl 3.2...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker-auth-athenz (>=2.11.0, <=2.11.3) +3 more potentially affected by CVE-2024-28098 via org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.3)

org.apache.pulsar:pulsar-broker MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.3 Source cves: CVE-2024-28098 Source advisory: MEND:CVE-2024-28098...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (3.1.0)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker-auth-sasl and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2023-5143...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (3.1.0)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker-auth-sasl and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2023-5143...

org.apache.pulsar:pulsar-docker-image (>=2.4.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.4.0, <=2.11.2) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=2.4.0, <=2.11.2)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =2.4.0, =2.4.0, =2.4.0, =2.11.2 Source cves: CVE-2023-51437 Source advisory: OSV:GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2023-51437 Source advisory: OSV:GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-docker-image (>=2.4.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.4.0, <=2.11.2) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=2.4.0, <=2.11.2)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =2.4.0, =2.4.0, =2.4.0, =2.11.2 Source cves: CVE-2023-51437 Source advisory: GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2023-51437 Source advisory: GHSA-C57V-4VG5-CM2X...

org.apache.pulsar:pulsar-docker-image (>=2.4.0, <=2.7.5), org.apache.pulsar:pulsar-server-distribution (>=2.4.0, <=2.11.2) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=2.4.0, <=2.11.2)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =2.4.0, =2.4.0, =2.4.0, =2.11.2 Source cves: CVE-2023-51437 Source advisory: MEND:CVE-2023-51437...

org.apache.pulsar:pulsar-server-distribution (>=3.0.0, <=3.0.1) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (>=3.0.0, <=3.0.1)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version =3.0.0, =3.0.0, =3.0.1 Source cves: CVE-2023-51437 Source advisory: MEND:CVE-2023-51437...

org.apache.pulsar:pulsar-server-distribution (3.1.0) potentially affected by CVE-2023-51437 via org.apache.pulsar:pulsar-broker-auth-sasl (3.1.0)

org.apache.pulsar:pulsar-broker-auth-sasl MAVEN version 3.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-broker-auth-sasl and may be impacted: - org.apache.pulsar:pulsar-server-distribution 3.1.0 Source cves: CVE-2023-5143...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.1) +7 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (>=2.11.0, <=2.11.1)

org.apache.pulsar:pulsar-websocket MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2023-37544 Source advisory: GHSA-83Q5-WHQP-R8JR...

io.github.embedded-middleware:embedded-pulsar-core (>=0.0.4, <=0.0.5), org.apache.pulsar:pulsar-broker (>=2.11.0, <=2.11.1) +7 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (>=2.11.0, <=2.11.1)

org.apache.pulsar:pulsar-websocket MAVEN version =2.11.0, =0.0.4, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.0, =2.11.1 Source cves: CVE-2023-37544 Source advisory: OSV:GHSA-83Q5-WHQP-R8JR...

com.datastax.oss:pulsar-jms-filters (>=4.0.0, <=4.0.1), io.streamnative.oss:pulsar-jms-filters (4.0.5) +8 more potentially affected by CVE-2023-37544 via org.apache.pulsar:pulsar-websocket (3.0.0)

org.apache.pulsar:pulsar-websocket MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.pulsar:pulsar-websocket and may be impacted: - com.datastax.oss:pulsar-jms-filters =4.0.0, =4.0.1 - io.streamnative.oss:pulsar-jms-filters...