Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache impalaApache Impala: Avro Schema URL Server-Side Request ForgeryCVE-2026-540485.3 Medium
- apache apache-airflow-providers-fab, apache software foundation airflow fab provider +1 moreApache Airflow FAB provider: FAB Azure AD OAuth: id_token issuer/audience not validated — cross-tenant authentication bypassCVE-2026-751569.1 Critical
- apache antApache Ant: Path traversal in ftp and scp tasks allows arbitrary file writeCVE-2026-78254Fix available7.4 High
- apache software foundation griffin hive metastore moduleApache Griffin Hive Metastore Module: SQL Injection Vulnerability in Hive Metastore ModuleCVE-2026-526918.8 High
- apache software foundation alluraApache Allura: Stored XSS via code repositoriesCVE-2026-801906.1 Medium
- apache software foundation skywalkingApache SkyWalking: CWE-79 stored XSS in Booster UI dashboard widgets (incomplete fix of CVE-2025-54057)CVE-2026-852296.1 Medium
- apache software foundation alluraApache Allura: Information exposure via searchCVE-2026-812707.5 High
- apache software foundation skywalkingApache SkyWalking: PagerDuty alarm hook transmits the integration routing key over cleartext HTTPCVE-2026-712165.3 Medium
- apache software foundation alluraApache Allura: Server-side request forgeryCVE-2026-801819.1 Critical
- apache software foundation alluraApache Allura: Stored XSS via markdown HTML processingCVE-2026-801806.1 Medium
- apache sparkApache Spark: XSS Vulnerability in Spark Web 3.5.4CVE-2026-32773Fix available6.1 Medium
- apache wicketApache Wicket: XSS in AbstractSingleSelectChoice via getNullValidDisplayValueCVE-2026-769866.1 Medium
- apache wicketApache Wicket: XSS in Palette via getAdditionalAttributesCVE-2026-769855.1 Medium
- apache wicketApache Wicket: XSS in AutoLabelTextResolver via FormComponent.setLabelCVE-2026-769835.1 Medium
- apache wicketApache Wicket: XSS in MetaDataHeaderItem via addTagAttributeCVE-2026-769845.1 Medium
- apache wicketApache Wicket: XSS in Button via its model objectCVE-2026-769825.1 Medium
- apache wicketApache Wicket: XSS in AjaxEditableLabel and its subclasses via IChoiceRenderer and defaultNullLabelCVE-2026-758025.1 Medium
- apache wicketApache Wicket: Cross-Site Request Forgery (CSRF) protection bypass in ResourceIsolationRequestCycleListenerCVE-2026-713784.6 Medium
- apache wicketApache Wicket: Configured file upload limits are not enforced when the multipart request has already been parsedCVE-2026-712577.5 High
- apache wicketApache Wicket: Path traversal in resource style/variation/localeCVE-2026-704495.3 Medium
- apache shiroApache Shiro: Server-side POST request may be steered to an alternate hostCVE-2026-583015.9 Medium
- apache apisixApache APISIX: Cross-user response poisoning in serverless pluginsCVE-2026-74848Fix available7.0 High
- apache apisixApache APISIX: Unauthenticated CPU-exhaustion DoSCVE-2026-75005Fix available8.7 High
- apache apisixApache APISIX: ldap-auth plugin cross-subtree identity impersonationCVE-2026-75020Fix available7.0 High
- apache apisixApache APISIX: attach-consumer-label does not strip client-supplied consumer-label headersCVE-2026-63041Fix available5.3 Medium
- apache tomcatApache Tomcat: Principal lookup can fail open in some casesCVE-2026-68569Fix available8.1 High
- apache hiveApache Hive: SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL pathsCVE-2026-498459.8 Critical
- apache hiveApache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.urlCVE-2026-559769.1 Critical
- apache hiveApache Hive: Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive userCVE-2026-535617.4 High
- apache dolphinschedulerApache DolphinScheduler: General user can mint admin access tokens via /access-tokensCVE-2026-490508.8 High
- apache alluraApache Allura: Unauthenticated REST disclosureCVE-2026-750995.3 Medium
- apache camelApache Camel: Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routesCVE-2026-78329Public exploitFix available9.8 Critical
- apache camelApache Camel: Camel-Atmosphere-Websocket: WebSocket dispatch header injectionCVE-2026-71300Public exploitFix available9.8 Critical
- apache camelApache Camel: Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategyCVE-2026-63621Public exploitFix available5.3 Medium
- apache camelApache Camel: Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by…CVE-2026-66908Public exploitFix available7.5 High
- apache camelApache Camel: Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the resultCVE-2026-66907Public exploitFix available7.5 High
- apache camelApache Camel: Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDirCVE-2026-66906Public exploitFix available9.1 Critical
- apache camelApache Camel: Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDirCVE-2026-60093Public exploitFix available5.5 Medium
- apache camelApache Camel: Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabledCVE-2026-59230Public exploitFix available6.5 Medium
- apache cloudstackApache CloudStack: DoS caused by database connections leakCVE-2026-596546.8 Medium
- apache inlongApache InLong: Agent Installer — Command Injection to RCE via Default CredentialsCVE-2026-630468.8 High
- apache cloudstackApache CloudStack: OS Command Injection due to unsanitized mount commandCVE-2026-473598.8 High
- apache cloudstackApache CloudStack: RCE and SSRF in direct download, metalink and NFS templatesCVE-2026-501128.8 High
- apache cloudstackApache CloudStack: Improper access control in Userdata reference APIsCVE-2026-502227.5 High
- apache cloudstackApache CloudStack: Server-Side Request Forgery (SSRF) vulnerability in webhook moduleCVE-2026-590859.1 Critical
- apache cloudstackApache CloudStack: Unauthenticated OAuth provider client-secret disclosureCVE-2026-596557.5 High
- apache cloudstackApache CloudStack: Sensitive Information Disclosure via Cleartext Storage in AsyncJobCVE-2026-596577.5 High
- apache cloudstackApache CloudStack: LDAP provider configuration disclosureCVE-2026-597807.5 High
- apache cloudstackApache CloudStack: Missing Privilege Check in Two-Factor Authentication Disable FlowCVE-2026-597998.8 High
- apache cloudstackApache CloudStack: OAuth2 Token Cross-Request LeakCVE-2026-613977.5 High
- Show moreLoading…