Skip to contentApache vulnerabilities
Products
Show 140 moreShow less
Newest
- apache tomcatApache Tomcat: HTTP/2 no-authority bypass of strict SNI validation - CVE-2026-32990 fix incompleteCVE-2026-65637Fix available9.8 Critical
- apache tomcatApache Tomcat: TOCTOU when setting specific permissions for Unix Domain SocketsCVE-2026-65183Fix available8.1 High
- apache tomcatApache Tomcat: Bypass longest prefix security constraintCVE-2026-65182Fix available9.1 Critical
- apache skywalking mcpApache SkyWalking MCP: SSRF via set_skywalking_url Tool and GraphQL Expression Injection in MCP ServerCVE-2026-348849.8 Critical
- apache strutsApache Struts: Shared serialization state in the JSON pluginCVE-2026-736324.3 Medium
- apache strutsApache Struts: Shared parsing state in the JSON pluginCVE-2026-736314.3 Medium
- apache strutsApache Struts: Unbounded growth of localized-text caches driven by the request localeCVE-2026-736357.5 High
- apache strutsApache Struts: Unbounded read of a Content Security Policy violation reportCVE-2026-736347.5 High
- apache strutsApache Struts: Unbounded read of a JSON request bodyCVE-2026-73633Public exploit7.5 High
- apache shindig, apache software foundation shindig common, shindig social-api +2 moreApache Shindig Common, Apache Shindig Social-Api: Remote Code Execution via XStream deserialization (OpenSocial REST API)CVE-2026-662567.2 High
- apache alluraApache Allura: XSS in markdown pipelineCVE-2026-732376.1 Medium
- apache alluraApache Allura: XSS in code displayCVE-2026-732386.1 Medium
- apache alluraApache Allura: Missing permission checks IDORCVE-2026-732396.5 Medium
- apache alluraApache Allura: Git command injectionCVE-2026-732409.8 Critical
- apache airflowApache Airflow: Secrets masker: `var.json` Variable values not masked in the Rendered Templates UICVE-2026-59244Fix available6.5 Medium
- apache airflowApache Airflow: Unguarded import_string() of airflow_exc_ser / base_exc_ser exception nodes in BaseSerialization.deserialize enables DAG-author RCE on Scheduler / API ServerCVE-2026-58076Fix available8.8 High
- apache airflowApache Airflow: Arbitrary airflow.* class instantiation on the API server via the XCom deserialize endpointCVE-2026-59242Fix available5.4 Medium
- apache airflowApache Airflow: Airflow Variables were not masked in the UI for authenticated usersCVE-2026-54183Fix available4.3 Medium
- apache airflowApache Airflow: DAG-author remote code execution on the Scheduler via awaiting_input next_kwargs deserializationCVE-2026-67260Fix available7.3 High
- apache airflowApache Airflow: DAG-author remote code execution on the Scheduler via a Serde `Callback` deserialization gadgetCVE-2026-67587Fix available8.8 High
- apache airflowApache Airflow: Config API: team-scoped Celery broker secret disclosed to a Viewer (multi-team masking bypass)CVE-2026-65017Fix available6.5 Medium
- apache airflowApache Airflow: Authorization bypass in the Backfill API through conflicting interpretations of the backfill idCVE-2026-68968Fix available7.5 High
- apache airflowApache Airflow: Bulk Variable and Connection endpoints record secret values in the audit log in cleartextCVE-2026-68969Fix available6.5 Medium
- apache airflowApache Airflow: Values of a list-shaped Variable are not masked in task logs and the Rendered Templates UICVE-2026-68970Fix available6.5 Medium
- apache airflowApache Airflow: Cross-team authorization bypass in the asset materialization and dag-run result endpointsCVE-2026-68971Fix available6.5 Medium
- apache airflowApache Airflow: Connections test API: team-scope guard bypass resolves another team's environment ConnectionCVE-2026-68076Fix available5.4 Medium
- apache apache-airflow-providers-google, apache software foundation airflow google provider +1 moreApache Airflow Google provider: google Secret Manager backend: team scope is never applied, exposing every team's Connections and VariablesCVE-2026-68868Fix available6.5 Medium
- apache httpclient, apache software foundation httpcomponents client +1 moreApache HttpComponents Client: TLS hostname verification silently disabled on the async transport (default config, MITM)CVE-2026-71290Fix available9.1 Critical
- apache alluraApache Allura: Server-side request forgeryCVE-2026-692239.1 Critical
- apache apache-airflow-providers-amazon, apache software foundation airflow amazon provider +1 moreApache Airflow Amazon provider: amazon SSM / Secrets Manager backends: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-68872Fix available6.5 Medium
- apache software foundation airflow yandex provider, apache apache-airflow-providers-apache-yandex +1 moreApache Airflow Yandex provider: yandex Lockbox backend: team-scope guard bypass resolves another team's Connection or VariableCVE-2026-68871Fix available6.5 Medium
- apache tapestryApache Tapestry: Possible classpath file download through URL manipulationCVE-2026-618997.5 High
- apache rangerApache Ranger: OS Command Injection via Username in UnixUserGroupBuilderCVE-2026-28672Public exploit9.8 Critical
- apache rangerApache Ranger: SQL Injection vulnerability in lookup functionalityCVE-2026-322279.8 Critical
- apache rangerApache Ranger: Privilege Escalation via URL ParameterCVE-2026-409209.8 Critical
- apache rangerApache Ranger: Remote Code Execution via JDBC URL InjectionCVE-2026-425379.8 Critical
- apache rangerApache Ranger: Remote Code Execution via Arbitrary Class InstantiationCVE-2026-444169.8 Critical
- apache rangerApache Ranger: Remote Code Execution Vulnerability in GraalScriptEngineCreatorCVE-2026-557999.8 Critical
- apache rangerApache Ranger: Download APIs expose plugin data without authenticationCVE-2026-558147.5 High
- apache rangerApache Ranger: Clients accept TLS certificates issued for other hostnamesCVE-2026-659427.5 High
- apache rangerApache Ranger: Logs contain replayable JWT bearer tokensCVE-2026-659456.5 Medium
- apache rangerApache Ranger: UnixAuth lacks brute-force protectionCVE-2026-659487.3 High
- apache foryApache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadataCVE-2026-715597.5 High
- apache foryApache Fory: Heap type confusion in C++ polymorphic smart-pointer deserializationCVE-2026-715589.8 Critical
- apache foryApache Fory: Out-of-bounds heap read in C++ struct deserializer tagged-int fast-pathCVE-2026-715609.1 Critical
- apache apr-util, apache software foundation portable runtime utility +1 moreApache Portable Runtime Utility: apr_password_validate() vulnerable to timing attackCVE-2025-49506Fix available7.5 High
- apache apr-util, apache software foundation portable runtime utility +1 moreApache Portable Runtime Utility: apr-util XML stack recursion crashCVE-2026-32327Fix available9.1 Critical
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: SQL Injection in apr_dbd_oracleCVE-2026-34191Fix available9.1 Critical
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: Heap buffer overflow in APR redis clientCVE-2026-34501Fix available7.5 High
- apache software foundation portable runtime utility, apache apr-util +1 moreApache Portable Runtime Utility: Heap buffer overflow in APR memcached clientCVE-2026-34502Fix available7.5 High
- Show moreLoading…