Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TZlibTransport Decompression Size LimitCVE-2026-48586Fix available8.7 High
- apache thriftApache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard BypassCVE-2026-48145Fix available8.2 High
- apache thriftApache Thrift: c_glib TLS Client Missing Hostname VerificationCVE-2026-48144Fix available9.1 Critical
- apache thriftApache Thrift: Unbounded Read Leading to Denial of ServiceCVE-2026-45112Fix available6.9 Medium
- apache thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TCompactProtocol varint byte-count limitCVE-2026-43871Fix available8.7 High
- apache thriftApache Thrift: Unbounded Zlib Decompression in Python THeaderTransportCVE-2026-41608Fix available7.5 High
- apache hbaseApache HBase: Missing scanner instance owner check in thrift delegation serviceCVE-2026-493266.5 Medium
- apache nimbleApache NimBLE: Mesh Proxy SAR reassembly unbounded append and unchecked failureCVE-2026-464525.3 Medium
- apache nimbleApache NimBLE: NULL pointer dereference vulnerability in SMP LTK requestCVE-2026-458167.5 High
- apache nimbleApache NimBLE: Remote reachable assertion in ATT Read Multiple Variable Response handlerCVE-2026-458157.5 High
- apache nimbleApache NimBLE: Incorrect data validation in BASS add/modify source operationCVE-2026-458138.8 High
- apache nimbleApache NimBLE: OOB Read via sizeof(pointer) in Legacy Advertising Report HandlerCVE-2026-458126.5 Medium
- apache nimbleApache NimBLE: Buffer overflow in socket HCI transportCVE-2026-458117.5 High
- apache neethiApache Neethi: Remote PolicyReference fetch lacks resource boundsCVE-2026-661447.5 High
- apache neethiApache Neethi: Missing global alternative-output budget across policy computation pathsCVE-2026-661437.5 High
- apache neethiApache Neethi: Uncontrolled recursion in policy processingCVE-2026-661427.5 High
- apache opennlpApache OpenNLP: Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XMLCVE-2026-63317Fix available5.6 Medium
- apache foryApache Fory: Rust MetaString heap use-after-freeCVE-2026-600807.3 High
- apache foryApache Fory, Apache Fory: Class-registration bypass through an auto-admitted SerializedLambda capturing interfaceCVE-2026-646069.8 Critical
- apache foryApache Fory, Apache Fory: Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserializationCVE-2026-646099.1 Critical
- apache foryApache Fory: Heap type confusion and out-of-bounds read/write in C++ compatible-mode field-skip pathsCVE-2026-646089.8 Critical
- apache mina sshdApache MINA SSHD: Path traversal in org.apache.sshd:sshd-git on WindowsCVE-2026-566237.1 High
- apache mina sshdApache MINA SSHD: SSH certificate options lack validationsCVE-2026-56624Fix available7.3 High
- apache mina sshdApache MINA SSHD: Remote execution of JGit commands can write files on the serverCVE-2026-58624Fix available5.4 Medium
- apache mina sshdApache MINA SSHD: Path traversal in SCP file receptionCVE-2026-56452Fix available7.5 High
- apache syncopeApache Syncope: Low-privileged authenticated SSRF in Connectors and Resources checkCVE-2026-624188.1 High
- apache syncopeApache Syncope: User self-service privilege escalationCVE-2026-62183Public exploit9.8 Critical
- apache syncopeApache Syncope: SQL injection vulnerability in Audit Events searchCVE-2026-573089.8 Critical
- apache syncopeApache Syncope: Remote Code Execution via Scripted ConnectorCVE-2026-534219.8 Critical
- apache syncopeApache Syncope: Remote Code Execution via Flowable BPMN Groovy ScriptTaskCVE-2026-534059.8 Critical
- apache syncopeApache Syncope: RCE via Groovy Sandbox bypassCVE-2026-630719.8 Critical
- apache traffic serverApache Traffic Server: DoS vulnerability in HTTP/2 via stalled flow-control conditionsCVE-2026-591737.5 High
- apache accumuloApache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissionsCVE-2026-627645.7 Medium
- apache ivyApache Ivy: PackagerResolver path traversal vulnerabilityCVE-2026-26032Fix available5.4 Medium
- apache fineractApache Fineract: Office list: SQL Injection via Subquery in orderByCVE-2026-57821Public exploit8.1 High
- apache fineractApache Fineract: SQL injection in runreports endpointCVE-2026-351528.8 High
- apache fineractApache Fineract: Boolean SQL Injection in Client Search API (orderBy parameter) leading to Local File DisclosureCVE-2026-562878.1 High
- apache openmeetingsApache OpenMeetings: Arbitrary File ReadCVE-2026-494886.5 Medium
- apache kylinApache Kylin: Improper authorization in job information retrievalCVE-2026-623934.3 Medium
- apache kylinApache Kylin: OS Command Injection via Async Query APICVE-2026-623929.8 Critical
- apache kylinApache Kylin: SQL Injection Vulnerability in Catalog Cache Refresh APICVE-2026-623909.8 Critical
- apache dorisApache Doris: Improper Authentication in Frontend HTTP APICVE-2026-583199.1 Critical
- apache tomcatApache Tomcat: EncryptInterceptor requirements not clearly documentedCVE-2026-59084Fix available9.1 Critical
- apache tomcatApache Tomcat: Incorrect URL decoding in RewriteValve may allow security control bypassCVE-2026-59083Fix available9.1 Critical
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB auth manager: a DAG named "DAGs" hijacks the global all-DAGs permission (access_control privilege escalation via resource_name() collision)CVE-2026-592458.1 High
- apache apache-airflow-providers-git, apache software foundation airflow git provider +1 moreApache Airflow Git provider: Git provider hook defaults to StrictHostKeyChecking=no, disabling SSH host-key verificationCVE-2026-580658.1 High
- apache gravitinoApache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints.CVE-2026-41041Fix available9.1 Critical
- apache gravitinoApache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIsCVE-2026-49876Fix available6.5 Medium
- apache log4j, apache software foundation log4j api +1 moreApache Log4j API: Improper serialization of non-finite floating-point values in MapMessage.asJson()CVE-2026-49844Public exploitFix available6.3 Medium
- apache software foundation iotdb c++ clientApache IoTDB C++ client: Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server dataCVE-2026-404547.5 High
- Show moreLoading…