Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache apache-airflow-providers-keycloak, apache software foundation airflow providers keycloak +1 moreApache Airflow Providers Keycloak: OAuth Login CSRF — Missing State Parameter in Keycloak Auth ManagerCVE-2026-40948Fix available5.4 Medium
- apache airflowApache Airflow: 3.x - Nested Variable Secret Values Bypass Redaction via max_depth=1CVE-2026-32690Fix available3.7 Low
- apache airflowApache Airflow: Bad example of BashOperator shell injection via dag_run.confCVE-2026-30898Fix available8.8 High
- apache airflowApache Airflow: Exposing stack trace in case of constraint errorCVE-2026-30912Fix available7.5 High
- apache airflowApache Airflow: API extra-links triggers XCom deserialization/class instantiation (Airflow 3.1.5)CVE-2026-25917Fix available7.2 High
- apache airflowApache Airflow: Users with asset materialization permisssions could trigger Dags they had no access toCVE-2026-32228Fix available7.5 High
- apache airflowApache Airflow: JWT token appearing in logsCVE-2026-31987Fix available7.5 High
- apache airflowApache Airflow: Sensitive Azure Service Bus connection string (and possibly other providers) exposed to users with view accessCVE-2026-25219Fix available6.5 Medium
- apache skywalkingApache SkyWalking: The SkyWalking OAP /debugging/config/dump endpoint may leak sensitive configuration information of MySQL/PostgreSQL.CVE-2026-30778Fix available7.5 High
- apache airflowApache Airflow: RCE by race condition in example_xcom dagCVE-2025-54550Fix available8.1 High
- apache apisixApache APISIX: Openid-connect `tls_verify` field is disabled by defaultCVE-2026-31923Fix available7.5 High
- apache pdfbox, apache software foundation pdfbox examples +1 moreApache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example CodeCVE-2026-33929Fix available4.3 Medium
- apache apisixApache APISIX: Plugin tencent-cloud-cls log export uses plaintext HTTPCVE-2026-31924Fix available5.3 Medium
- apache apisixApache APISIX: forward auth plugin allows header injectionCVE-2026-31908Public exploitFix available9.1 Critical
- apache airflowApache Airflow: Unsafe Deserialization via Legacy Serialization Keys (__type/__var) Bypass in XCom APICVE-2026-33858Fix available8.8 High
- apache airflowApache Airflow: Secrets from Airflow config file logged in plain text in DAG run logs UICVE-2025-66236Fix available7.5 High
- apache skywalking mcpApache SkyWalking MCP: Server-Side Request Forgery via SW-URL Header in MCP ServerCVE-2026-34476Fix available7.1 High
- apache storm, apache software foundation storm client +1 moreApache Storm Client: RCE through Unsafe Deserialization via Kerberos TGT Credential HandlingCVE-2026-35337Fix available8.8 High
- apache storm, apache software foundation storm ui +1 moreApache Storm UI: Stored Cross-Site Scripting (XSS) via Unsanitized Topology Metadata in Storm UICVE-2026-35565Fix available5.4 Medium
- apache log4cxx, apache software foundation log4cxx (brew), log4cxx (conan) +2 moreApache Log4cxx, Apache Log4cxx (Conan), Apache Log4cxx (Brew): Silent log event loss in XMLLayout due to unescaped XML 1.0 forbidden charactersCVE-2026-40023Fix available6.3 Medium
- apache log4netApache Log4net: Silent log event loss in XmlLayout and XmlLayoutSchemaLog4J due to unescaped XML 1.0 forbidden charactersCVE-2026-40021Fix available6.3 Medium
- apache log4j, apache software foundation log4j json template layout +1 moreApache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayoutCVE-2026-34481Fix available6.3 Medium
- apache log4j, apache software foundation log4j core +1 moreApache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden charactersCVE-2026-34480Fix available6.9 Medium
- apache log4j, apache software foundation log4j 1 to log4j 2 bridge +1 moreApache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden charactersCVE-2026-34479Fix available6.9 Medium
- apache log4j, apache software foundation log4j core +1 moreApache Log4j Core: Log injection in Rfc5424Layout due to silent configuration incompatibilityCVE-2026-34478Fix available6.9 Medium
- apache log4j, apache software foundation log4j core +1 moreApache Log4j Core: verifyHostName attribute silently ignored in TLS configuration, allowing hostname verification bypassCVE-2026-34477Fix available6.3 Medium
- apache activemq, activemq broker, apache software foundation activemq all +10 more +12 moreApache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Incorrect handling of TLSv1.3 KeyUpdate can be exploited to cause DoS via OOMCVE-2026-39304Fix available7.5 High
- apache tomcatApache Tomcat: OCSP checks sometimes soft-fail with FFM even when soft-fail is disabledCVE-2026-34500Fix available6.5 Medium
- apache tomcatApache Tomcat: Cloud membership for clustering component exposed the Kubernetes bearer tokenCVE-2026-34487Fix available7.5 High
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 moreApache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptorCVE-2026-34486In KEVPublic exploitFix availableEPSS 98.5%7.5 High
- apache tomcatApache Tomcat: Incomplete escaping of JSON access logsCVE-2026-34483Fix available7.5 High
- apache tomcatApache Tomcat: Fix for CVE-2025-66614 is incompleteCVE-2026-32990Fix available5.3 Medium
- apache tomcat, red hat enterprise linux 10, enterprise linux 10.0 extended update support +18 more +20 moreApache Tomcat: EncryptInterceptor vulnerable to padding oracle attack by defaultCVE-2026-29146Fix available7.5 High
- apache tomcat, tomcat native +1 moreApache Tomcat, Apache Tomcat Native: OCSP checks sometimes soft-fail even when soft-fail is disabledCVE-2026-29145Public exploitFix available9.1 Critical
- apache tomcatApache Tomcat: TLS cipher order is not preservedCVE-2026-29129Fix available7.5 High
- apache tomcatApache Tomcat: Occasionally open redirectCVE-2026-25854Public exploitFix available6.1 Medium
- apache tomcatApache Tomcat: Request smuggling via invalid chunk extensionCVE-2026-24880Public exploitFix available7.5 High
- apache software foundation activemq, activemq all, activemq mqtt +2 moreApache ActiveMQ, Apache ActiveMQ All, Apache ActiveMQ MQTT: Missing fix for CVE-2025-66168: MQTT control packet remaining length field is not properly validatedCVE-2026-40046Fix available7.5 High
- apache openmeetingsApache OpenMeetings: Insufficient checks in FileWebServiceCVE-2026-33005Fix available4.3 Medium
- apache openmeetingsApache OpenMeetings: Hardcoded Remember-Me Cookie Encryption Key and SaltCVE-2026-33266Fix available7.5 High
- apache openmeetingsApache OpenMeetings: Login Credentials Passed via GET Query ParametersCVE-2026-34020Fix available7.5 High
- apache airflowApache Airflow: Airflow Logout Not Invalidating JWTCVE-2025-57735Fix available9.1 Critical
- apache dolphinschedulerApache DolphinScheduler: Users can access sensitive information through the actuator endpoint.CVE-2025-62188Fix available7.5 High
- apache airflowApache Airflow: Authorization bypass in DagRun wait endpoint (XCom exposure)CVE-2026-34538Fix available6.5 Medium
- apache cassandraApache Cassandra: Authenticated DoS via ALTER ROLE Password HashingCVE-2026-32588Fix available6.5 Medium
- apache cassandraApache Cassandra: cqlsh history sensitive information leakCVE-2026-27315Fix available5.5 Medium
- apache cassandraApache Cassandra: Privilege escalation via ADD IDENTITY authorization bypassCVE-2026-27314Fix available8.8 High
- apache kafka, apache software foundation kafka clients +1 moreApache Kafka Clients: Kafka Producer Message Corruption and Misrouting via Buffer Pool Race ConditionCVE-2026-35554Fix available8.7 High
- apache activemq, activemq broker, activemq web +2 more +4 moreApache ActiveMQ Client, Apache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ Web, Apache ActiveMQ: Improper Limitation of a Pathname to a Restricted Classpath DirectoryCVE-2026-33227Fix available4.3 Medium
- apache activemq, activemq broker, apache software foundation activemq all +8 more +10 moreApache ActiveMQ Broker, Apache ActiveMQ All, Apache ActiveMQ: Authenticated users could perform RCE via Jolokia MBeansCVE-2026-34197In KEVPublic exploitFix availableEPSS 98.3%8.8 High
- Show moreLoading…