Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache airflowApache Airflow: Connections test API: team-scope guard bypass resolves another team's environment ConnectionCVE-2026-68076Fix available5.4 Medium
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and VariablesCVE-2026-68868Fix available6.5 Medium
- apache httpclient, apache software foundation httpcomponents client +1 moreApache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)CVE-2026-71290Fix available9.1 Critical
- apache alluraApache Allura: Server-side request forgeryCVE-2026-692239.1 Critical
- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-68872Fix available6.5 Medium
- apache software foundation airflow yandex provider, apache apache-airflow-providers-apache-yandex +1 moreApache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-68871Fix available6.5 Medium
- apache software foundation airflow microsoft azure providerApache Airflow Microsoft Azure provider: microsoft.azure Key Vault backend: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-688705.3 Medium
- apache tapestryApache Tapestry: Possible classpath file download through URL manipulationCVE-2026-618997.5 High
- apache rangerApache Ranger: OS Command Injection via Username in UnixUserGroupBuilderCVE-2026-28672Public exploit9.8 Critical
- apache rangerApache Ranger: SQL Injection vulnerability in lookup functionalityCVE-2026-322279.8 Critical
- apache rangerApache Ranger: Privilege Escalation via URL ParameterCVE-2026-409209.8 Critical
- apache rangerApache Ranger: Remote Code Execution via JDBC URL InjectionCVE-2026-425379.8 Critical
- apache rangerApache Ranger: Remote Code Execution via Arbitrary Class InstantiationCVE-2026-444169.8 Critical
- apache rangerApache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreatorCVE-2026-557999.8 Critical
- apache rangerApache Ranger: Download APIs expose plugin data without authenticationCVE-2026-558147.5 High
- apache rangerApache Ranger: Clients accept TLS certificates issued for other hostnamesCVE-2026-659427.5 High
- apache rangerApache Ranger: Logs contain replayable JWT bearer tokensCVE-2026-659456.5 Medium
- apache rangerApache Ranger: UnixAuth lacks brute-force protectionCVE-2026-659487.3 High
- apache software foundation iotdbApache IoTDB: RPC service denial of service via unchecked Thrift string lengthCVE-2026-446307.5 High
- apache foryApache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadataCVE-2026-715597.5 High
- apache foryApache Fory: Heap type confusion in C++ polymorphic smart-pointer deserializationCVE-2026-715589.8 Critical
- apache foryApache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-pathCVE-2026-715609.1 Critical
- apache apr-util, apache software foundation portable runtime utility +1 moreApache Portable Runtime Utility: apr_password_validate() vulnerable to timing attackCVE-2025-49506Fix available7.5 High
- apache apr-util, apache software foundation portable runtime utility +1 moreApache Portable Runtime Utility: apr-util XML stack recursion crashCVE-2026-32327Fix available9.1 Critical
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: SQL Injection in apr_dbd_oracleCVE-2026-34191Fix available9.1 Critical
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: Heap buffer overflow in APR redis clientCVE-2026-34501Fix available7.5 High
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: Heap buffer overflow in APR memcached clientCVE-2026-34502Fix available7.5 High
- apache cxfApache CXF: OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProviderCVE-2026-578188.1 High
- apache cxfApache CXF: OAuth2 Dynamic Client Registration Scope Self-EscalationCVE-2026-614669.1 Critical
- apache cxfApache CXF: JwtRequestCodeFilter silently overrides outer PKCE and nonce parametersCVE-2026-63687Fix available9.1 Critical
- apache cxfApache CXF: Self-issued ID token claims validation skippedCVE-2026-655839.1 Critical
- apache cxfApache CXF: DefaultEncryptingCodeDataProvider allows unlimited authorization code replayCVE-2026-68079Fix available9.8 Critical
- apache cxfApache CXF: Revocation bypass in DefaultEncryptingOAuthDataProviderCVE-2026-684817.5 High
- apache cxfApache CXF: XXE via WSDL/XSD import parsingCVE-2026-654327.5 High
- apache cxfApache CXF: The authorization code hash (c_hash) is not enforced for the hybrid OIDC flowCVE-2026-578178.1 High
- apache cxfApache CXF: Unsafe deserialization of inbound JMS ObjectMessageCVE-2026-66909Fix available9.8 Critical
- apache cxfApache CXF: Denial of service via message header attachmentsCVE-2026-649587.5 High
- apache cxfApache CXF: No default restriction on the amount of form parameters per messageCVE-2026-578197.5 High
- apache cxfApache CXF: Denial of Service attack via large attachmentsCVE-2026-542257.5 High
- apache polarisApache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validationCVE-2026-64640Public exploitFix available5.3 Medium
- apache answerApache Answer: Residual Administrative API Key Access After Role or Account RevocationCVE-2026-600539.1 Critical
- apache answerApache Answer: Unauthorized disclosure of deleted or pending answer contentCVE-2026-600237.5 High
- apache answerApache Answer: Missing authorization in revision audit reject allows authenticated users to reject pending revisionsCVE-2026-507496.5 Medium
- apache answerApache Answer: Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URLCVE-2026-489126.5 Medium
- apache answerApache Answer: Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation FlowCVE-2026-489117.5 High
- apache answerApache Answer: Denial of service via crafted Accept-Language header parsingCVE-2026-488347.5 High
- apache lucyApache Lucy: stack-buffer-overflow in JSON parser error reporter on malformed inputCVE-2026-614869.8 Critical
- apache lucyApache Lucy: LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoSCVE-2026-614849.8 Critical
- apache lucyApache Lucy: QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoSCVE-2026-614837.5 High
- apache qpid broker-jApache Qpid Broker-J: Unbounded echo flow responses can lead to denial of serviceCVE-2026-680806.5 Medium
- Show moreLoading…