Apache Polaris vulnerabilities
- apache polaris Apache Polaris: register endpoint reads attacker-controlled storage location before allowed-locations validation 5.3 Medium
- apache polaris Apache Polaris: could broaden vended S3 credentials through wildcard-bearing namespace or table names 9.4 Critical
- apache polaris Apache Polaris: could broaden vended GCS credentials through unescaped identifier content in access-boundary CEL conditions 9.4 Critical
- apache polaris Apache Polaris: staged table creation could vend storage credentials for unvalidated locations 9.4 Critical
- apache polaris Apache Polaris: No protection on `write.metadata.path` 9.4 Critical