org.apache.pulsar:pulsar vulnerabilities (Maven)

4 vulnerabilities.

• org.apache.pulsar:pulsar Maven Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar Proxy CVE-2023-30429 Fix available 9.6 CriticalJuly 12, 2023
• org.apache.pulsar:pulsar Maven Apache Pulsar Proxy target broker address isn't validated CVE-2022-24280 Fix available 6.5 MediumSeptember 23, 2022
• org.apache.pulsar:pulsar Maven Pulsar Admin API allows access to data from other tenants using getMessageById API CVE-2021-41571 Fix available 6.5 MediumFebruary 1, 2022
• org.apache.pulsar:pulsar Maven Authentication with JWT allows use of “none”-algorithm CVE-2021-22160 Fix available EPSS 52.9% 9.8 CriticalMay 26, 2021