Skip to contentApache Software Foundation vulnerabilities
Products
Show 140 moreShow less
Newest
- apache jackrabbitApache Jackrabbit: Pre-auth hijack of cached sessions via derivable WebDAV lock tokensCVE-2026-92414Public exploit9.3 Critical
- apache software foundation yunikornApache YuniKorn: Admission control bypass via system label forgeryCVE-2026-971464.8 Medium
- apache software foundation yunikornApache YuniKorn: LDAP Group provider panics on lowercase attribute nameCVE-2026-782432.1 Low
- apache software foundation yunikornApache YuniKorn: Admission control bypass via workload UPDATE operationCVE-2026-923932.0 Low
- apache software foundation impalaApache Impala: Stored XSS in Impala query plansCVE-2026-936845.4 Medium
- apache impalaApache Impala: Path traversal executes JARs outside trusted pathsCVE-2026-904666.5 Medium
- apache software foundation impalaApache Impala: Impala Executor Webserver Auth BypassCVE-2026-977209.1 Critical
- apache log4netApache log4net: RemoteSyslogAppender silently deletes non-ASCII contentCVE-2026-1052445.3 Medium
- apache log4netApache log4net: Oversize EventLogAppender record silently discardedCVE-2026-1052435.3 Medium
- apache log4netApache log4net: Request validation failure drops the event in the aspnet-request converterCVE-2026-1052425.3 Medium
- apache log4netApache log4net: Unencodable content discards a whole SmtpPickupDirAppender batchCVE-2026-1052415.3 Medium
- apache log4netApache log4net: NUL character truncates OutputDebugStringAppender recordsCVE-2026-1052405.3 Medium
- apache log4netApache log4net: NUL character truncates EventLogAppender recordsCVE-2026-1052395.3 Medium
- apache software foundation commons bcelApache Commons BCEL: Class2HTML emits unescaped class strings, enabling stored XSSCVE-2026-105111Fix available2.3 Low
- apache software foundation commons bcelApache Commons BCEL: Class repositories cache class files under their self-declared names, enabling cache poisoningCVE-2026-94114Fix available8.2 High
- apache strutsApache Struts: Shared message formatter exposes date and time values across concurrent requestsCVE-2026-1047148.8 High
- apache strutsApache Struts: Unbounded request body read in the REST pluginCVE-2026-1047136.5 Medium
- apache strutsApache Struts: Disproportionate response size when rendering BigDecimal request parametersCVE-2026-1047127.5 High
- apache strutsApache Struts: OGNL injection in the legacy RESTful action mapperCVE-2026-104711Public exploit9.8 Critical
- apache software foundation traffic serverApache Traffic Server: SNI to Host header matching policy is not properly enforcedCVE-2026-102795Fix available7.0 High
- apache software foundation openofficeApache OpenOffice, Apache OpenOffice: Opening a malicious document can lead to system takeoverCVE-2026-59265Public exploit8.8 High
- apache software foundation thriftApache Thrift: C++ THeaderTransport does not enforce configured maxFrameSizeCVE-2026-66054Fix available6.9 Medium
- apache software foundation thriftApache Thrift: Java TSaslTransport post-auth data-frame missing size limitCVE-2026-61374Fix available7.1 High
- apache software foundation thriftApache Thrift: Unauthenticated single-packet crash of Go Thrift servers via the THeader transform countCVE-2026-63772Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: TJSONProtocol accepts a single JSON string/number exceeding the configured size limit (multi-language)CVE-2026-66055Fix available8.2 High
- apache software foundation thriftApache Thrift: c_glib read_message_begin leaves output parameters unset for non-versioned messagesCVE-2026-66081Fix available8.7 High
- apache software foundation thriftApache Thrift: Buffered transport reads are not accounted against MaxMessageSizeCVE-2026-66331Fix available6.9 Medium
- apache software foundation thriftApache Thrift: PHP accelerator sizes a stack buffer from a wire-controlled string lengthCVE-2026-66837Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift, Apache Thrift: skip() does not apply the recursion limit (Python accelerator, PHP, Perl, Lua, Smalltalk, OCaml)CVE-2026-66858Fix available8.7 High
- apache software foundation thriftApache Thrift: c_glib multiplexed processor crashes on a message it cannot routeCVE-2026-66859Fix available8.7 High
- apache software foundation thriftApache Thrift: C++ THttpTransport grows its line buffer without boundCVE-2026-83632Fix available9.2 Critical
- apache software foundation thriftApache Thrift: TFramedTransport and THeaderTransport re-enter Read once per frame that carries no payload (Go)CVE-2026-83663Fix available8.7 High
- apache software foundation thriftApache Thrift, Apache Thrift: WebSocket frame decoders allocate the payload buffer from the declared length, not the bytes received (Node.js, D)CVE-2026-83745Fix available8.7 High
- apache software foundation thriftApache Thrift: c_glib `read_all` spins when the underlying read returns 0CVE-2026-85476Fix available8.2 High
- apache software foundation thriftApache Thrift: php `--gen php:inlined` struct readers (and `TProtocol::skipBinary`) have no recursion-depth guardCVE-2026-96289Fix available8.2 High
- apache software foundation thriftApache Thrift: Perl `FramedTransport` reads and TLS socket writes re-slice the remaining buffer on every call (quadratic)CVE-2026-96287Fix available8.2 High
- apache software foundation thriftApache Thrift: Perl servers end `serve()` when serving one connection failsCVE-2026-96286Fix available8.2 High
- apache software foundation thriftApache Thrift: Ruby `SimpleServer` ends `serve()` on any non-Transport/Protocol exceptionCVE-2026-96277Fix available8.7 High
- apache software foundation thriftApache Thrift: Lua `TFramedTransport`/`THttpTransport` re-slice the buffer on every read (quadratic)CVE-2026-94658Fix available8.7 High
- apache software foundation thriftApache Thrift: javame `TJsonProtocol`/`TJSONProtocol` has no string size boundCVE-2026-94657Fix available8.2 High
- apache software foundation thriftApache Thrift: rb `TJsonProtocol`/`TJSONProtocol` has no string size boundCVE-2026-94656Fix available8.2 High
- apache software foundation thriftApache Thrift: Lua `TJsonProtocol` string/number readers have no size bound and are quadraticCVE-2026-94655Fix available8.2 High
- apache software foundation thriftApache Thrift: Python `TNonblockingServer` busy-loops and stops selecting all fds after an 8192-byte-boundary frameCVE-2026-94654Fix available8.2 High
- apache software foundation thriftApache Thrift: PHP framed/memory/HTTP transports re-slice the buffer on every read (quadratic)CVE-2026-94653Fix available8.2 High
- apache software foundation thriftApache Thrift: C++ `TEvhttpServer` leaks its `RequestContext` when the processor throws before calling backCVE-2026-94652Fix available6.3 Medium
- apache software foundation thriftApache Thrift: dart `TJsonProtocol`/`TJSONProtocol` has no string size boundCVE-2026-94648Fix available8.2 High
- apache software foundation thriftApache Thrift: Node.js `server.js` ends the process on any per-connection error (+ two triggers)CVE-2026-94646Fix available8.7 High
- apache software foundation thriftApache Thrift: PHP `thrift_protocol` C extension ignores the configured `maxStringSize`CVE-2026-94638Fix available6.3 Medium
- apache software foundation thriftApache Thrift: Go `THeaderTransport` does not bound the inflated size of a ZLIB frameCVE-2026-94637Fix available8.2 High
- apache software foundation thriftApache Thrift: Python `TZlibTransport` stops enforcing its decompressed-size limit once the limit is exactly used upCVE-2026-94636Fix available8.2 High
- Show moreLoading…