You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache PDFBox 2.0.29 released - posted by Andreas Lehmkühler <le...@apache.org> on 2023/07/01 17:34:49 UTC, 0 replies.
- CVE-2023-35797: Apache Airflow Hive Provider Beeline RCE with Principal - posted by Elad Kalif <el...@apache.org> on 2023/07/02 10:16:17 UTC, 0 replies.
- [ANN] Apache ActiveMQ 5.18.2 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2023/07/03 04:39:19 UTC, 0 replies.
- [ANN] Apache ActiveMQ 5.17.5 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2023/07/03 04:42:12 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking BanyanDB 0.4.0 Released - posted by Hongtao Gao <ha...@apache.org> on 2023/07/03 06:57:47 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX 3.4.0 has been released - posted by Xin Rong <al...@apache.org> on 2023/07/03 11:37:23 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.0.0-RC1 Released - posted by Gregor Zurowski <gz...@apache.org> on 2023/07/03 13:19:43 UTC, 0 replies.
- CVE-2023-34150: Apache Any23: Possible excessive allocation of resources reading input. - posted by Arnout Engelen <en...@apache.org> on 2023/07/04 12:16:34 UTC, 0 replies.
- [ANNOUNCE] Apache EventMesh 1.9.0 available - posted by mikexue <mi...@apache.org> on 2023/07/05 02:18:15 UTC, 0 replies.
- CVE-2023-33008: Apache Johnzon: Prevent inefficient internal conversion from BigDecimal at large scale - posted by Jean-Louis Monteiro <jl...@apache.org> on 2023/07/06 21:25:50 UTC, 0 replies.
- CVE-2023-35887: Apache MINA SSHD: Information disclosure bugs with RootedFilesystem - posted by Guillaume Nodet <gn...@apache.org> on 2023/07/07 12:34:46 UTC, 0 replies.
- [ANNOUNCE] Apache DataFu-Spark 1.8.0 Released - posted by Eyal Allweil <ey...@apache.org> on 2023/07/08 19:34:36 UTC, 0 replies.
- [ANNOUNCE] Airflow Providers prepared on July 06, 2023 are released - posted by Elad Kalif <el...@apache.org> on 2023/07/09 14:38:44 UTC, 0 replies.
- [ANNOUNCE] Apache Uniffle (Incubating) 0.7.1 available - posted by Jiafu Zhang <ji...@apache.org> on 2023/07/10 03:03:57 UTC, 0 replies.
- [ANN] Apache Struts 6.2.0 - posted by Lukasz Lenart <lu...@apache.org> on 2023/07/10 08:37:55 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Go Client 0.11.0 released - posted by Zike Yang <zi...@apache.org> on 2023/07/10 09:13:38 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.9.0 released - posted by Baodi Shi <ba...@apache.org> on 2023/07/10 09:56:26 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.4 - posted by Francesco Chicchiriccò <il...@apache.org> on 2023/07/10 11:45:14 UTC, 0 replies.
- CVE-2022-42009: Apache Ambari: A malicious authenticated user can remotely execute arbitrary code in the context of the application. - posted by Brahma Reddy Battula <br...@apache.org> on 2023/07/10 13:45:22 UTC, 0 replies.
- CVE-2022-45855: Apache Ambari: Allows authenticated metrics consumers to perform RCE - posted by Brahma Reddy Battula <br...@apache.org> on 2023/07/10 14:02:27 UTC, 0 replies.
- [ANNOUNCE] Apache JMeter 5.6.1 released - posted by Milamber <mi...@apache.org> on 2023/07/10 14:23:04 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.78 available - posted by Rémy Maucherat <re...@apache.org> on 2023/07/10 14:57:51 UTC, 0 replies.
- [ANNOUNCE] Airflow Providers prepared on July 09, 2023 are released - posted by Elad Kalif <el...@apache.org> on 2023/07/10 17:55:11 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.11 available - posted by Christopher Schultz <sc...@apache.org> on 2023/07/10 18:55:03 UTC, 0 replies.
- [ANN] Apache Tomcat 8.5.91 available - posted by Christopher Schultz <sc...@apache.org> on 2023/07/10 19:01:30 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.6.3 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2023/07/10 22:10:08 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.0-M9 (alpha) available - posted by Mark Thomas <ma...@apache.org> on 2023/07/11 07:20:14 UTC, 0 replies.
- [ANNOUNCE] Release Apache Kvrocks 2.5.0 - posted by Colin Chamber <co...@apache.org> on 2023/07/11 15:09:21 UTC, 0 replies.
- CVE-2023-35908: Apache Airflow: Access to DAGs without relevant permission - posted by Ephraim Anierobi <ep...@apache.org> on 2023/07/11 15:15:49 UTC, 0 replies.
- CVE-2023-22887: Apache Airflow path traversal by authenticated user - posted by Ephraim Anierobi <ep...@apache.org> on 2023/07/11 15:18:21 UTC, 0 replies.
- CVE-2022-46651: Apache Airflow: Security vulnerability on AirFlow Connections - posted by Ephraim Anierobi <ep...@apache.org> on 2023/07/11 15:19:18 UTC, 0 replies.
- CVE-2023-36543: Apache Airflow: ReDoS via dags function - posted by Ephraim Anierobi <ep...@apache.org> on 2023/07/11 15:20:28 UTC, 0 replies.
- CVE-2023-22888: Apache Airflow: Scheduler remote DoS - posted by Ephraim Anierobi <ep...@apache.org> on 2023/07/11 15:28:03 UTC, 0 replies.
- CVE-2023-30428: Apache Pulsar Broker: Incorrect Authorization Validation for Rest Producer - posted by Dave Fisher <wa...@apache.org> on 2023/07/11 15:48:17 UTC, 0 replies.
- CVE-2023-30429: Apache Pulsar: Incorrect Authorization for Function Worker when using mTLS Authentication through Pulsar Proxy - posted by Dave Fisher <wa...@apache.org> on 2023/07/11 15:49:33 UTC, 0 replies.
- CVE-2023-31007: Apache Pulsar: Broker does not always disconnect client when authentication data expires - posted by Dave Fisher <wa...@apache.org> on 2023/07/11 15:50:17 UTC, 0 replies.
- CVE-2023-37579: Apache Pulsar Function Worker: Incorrect Authorization for Function Worker Can Leak Sink/Source Credentials - posted by Dave Fisher <wa...@apache.org> on 2023/07/11 15:50:50 UTC, 0 replies.
- [ANNOUNCE] Apache JMeter 5.6.2 released - posted by Milamber <mi...@apache.org> on 2023/07/11 16:15:12 UTC, 0 replies.
- [ANNOUNCE] Apache Avro 1.11.2 released - posted by Ryan Skraba <rs...@apache.org> on 2023/07/11 16:24:56 UTC, 0 replies.
- CVE-2023-32200: Apache Jena: Exposure of execution in script engine expressions. - posted by Andy Seaborne <an...@apache.org> on 2023/07/11 16:44:10 UTC, 0 replies.
- CVE-2023-37582: Apache RocketMQ: Possible remote code execution when using the update configuration function - posted by Rongtong Jin <ji...@apache.org> on 2023/07/12 09:14:59 UTC, 0 replies.
- CVE-2023-37415: Apache Airflow Apache Hive Provider: Improper Input Validation in Hive Provider with proxy_user - posted by Elad Kalif <el...@apache.org> on 2023/07/12 18:24:33 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Incubating) 1.0.0 available - posted by PJ Fanning <fa...@apache.org> on 2023/07/13 22:34:05 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 3.0.0-beta1 released - posted by Andreas Lehmkühler <le...@apache.org> on 2023/07/14 06:28:44 UTC, 0 replies.
- [ANN] Apache Causeway 2.0.0-RC2 released. - posted by Dan Haywood <da...@apache.org> on 2023/07/14 11:35:21 UTC, 0 replies.
- CVE-2023-26512: Apache EventMesh RabbitMQ-Connector plugin allows RCE through deserialization of untrusted data - posted by Xue Weiming <mi...@apache.org> on 2023/07/15 12:45:39 UTC, 0 replies.
- [ANNOUNCE] Airflow Providers prepared on July 12, 2023 are released - posted by Elad Kalif <el...@apache.org> on 2023/07/16 05:40:28 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.22.16 released - posted by Julian Reschke <re...@apache.org> on 2023/07/17 07:54:50 UTC, 0 replies.
- [ANNOUNCE] Apache ShardingSphere on Cloud 0.3.0 available - posted by Liyao Miao <mi...@apache.org> on 2023/07/17 09:34:00 UTC, 0 replies.
- CVE-2023-28754: ShardingSphere-Agent: Deserialization vulnerability in ShardingSphere Agent - posted by Weijie Wu <wu...@apache.org> on 2023/07/19 06:24:52 UTC, 0 replies.
- [ANNOUNCE] Apache SkyWalking Kubernetes 4.5.0 is available - posted by kezhenxu94 <ke...@apache.org> on 2023/07/20 04:56:42 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit FileVault 3.7.0 released - posted by Konrad Windszus <kw...@apache.org> on 2023/07/20 12:54:16 UTC, 0 replies.
- [ANNOUNCE] Apache Commons FileUpload 2.0.0-M1 - posted by Gary Gregory <gg...@apache.org> on 2023/07/20 19:23:03 UTC, 0 replies.
- [ANNOUNCE] Release Apache OpenDAL(incubating) 0.38.1 - posted by cai lue <ca...@apache.org> on 2023/07/21 05:37:21 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 17, 2023 are released - posted by Elad Kalif <el...@apache.org> on 2023/07/21 07:19:27 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX 3.4.1 has been released - posted by Xin Rong <al...@apache.org> on 2023/07/21 10:10:41 UTC, 0 replies.
- [ANNOUNCE] Apache Shiro 1.12.0 released - posted by fpapon <fp...@apache.org> on 2023/07/21 13:41:52 UTC, 0 replies.
- [ANNOUNCE][CVE-2023-34478] Apache Shiro 1.12.0 released - posted by fpapon <fp...@apache.org> on 2023/07/21 13:45:34 UTC, 0 replies.
- [ANNOUNCE] Apache Solr Operator v0.7.1 released - posted by Houston Putman <ho...@apache.org> on 2023/07/21 17:02:08 UTC, 0 replies.
- [ANNOUNCE] Apache Solr 9.3.0 released - posted by Houston Putman <ho...@apache.org> on 2023/07/21 20:01:02 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX 3.2.2 has been released - posted by Xin Rong <al...@apache.org> on 2023/07/23 03:34:59 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.21.18 released - posted by Julian Reschke <re...@apache.org> on 2023/07/24 09:16:51 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 3.5.1 - posted by Divij Vaidya <di...@apache.org> on 2023/07/24 09:58:50 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.20.11 released - posted by Julian Reschke <re...@apache.org> on 2023/07/24 13:02:12 UTC, 0 replies.
- CVE-2023-34478: Apache Shiro before 1.12.0, or 2.0.0-alpha-3, may be susceptible to a path traversal attack when used together with APIs or other web frameworks that route requests based on non-normalized requests. - posted by Brian Demers <bd...@apache.org> on 2023/07/24 18:06:06 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.54.0 released - posted by Julian Reschke <re...@apache.org> on 2023/07/24 18:23:21 UTC, 0 replies.
- [ANNOUNCE] Release Apache InLong 1.8.0 - posted by Verne Deng <ve...@apache.org> on 2023/07/25 02:00:00 UTC, 0 replies.
- CVE-2023-34189: Apache InLong: General user can delete and update process - posted by Charles Zhang <do...@apache.org> on 2023/07/25 02:27:32 UTC, 0 replies.
- CVE-2023-34434: Apache InLong: JDBC URL bypassing by allowLoadLocalInfileInPath param - posted by Charles Zhang <do...@apache.org> on 2023/07/25 02:29:51 UTC, 0 replies.
- CVE-2023-35088: Apache InLong: SQL injection in audit endpoint - posted by Charles Zhang <do...@apache.org> on 2023/07/25 02:33:14 UTC, 0 replies.
- CVE-2023-37895: Apache Jackrabbit RMI access can lead to RCE - posted by Julian Reschke <re...@apache.org> on 2023/07/25 13:23:19 UTC, 0 replies.
- CVE-2023-38435: Apache Felix Healthcheck Webconsole Plugin: XSS in healthcheck webconsole plugin - posted by Carsten Ziegeler <cz...@apache.org> on 2023/07/25 15:02:59 UTC, 0 replies.
- CVE-2023-38647: Apache Helix: Deserialization vulnerability in Helix workflow and REST - posted by Junkai Xue <jx...@apache.org> on 2023/07/25 16:54:17 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Incubating) 1.0.1 available - posted by PJ Fanning <fa...@apache.org> on 2023/07/26 09:28:45 UTC, 0 replies.
- [ANNOUNCE] Apache Calcite 1.35.0 released - posted by Xiong Duan <xi...@apache.org> on 2023/07/27 11:57:44 UTC, 0 replies.
- [ANNOUNCE] Apache Celeborn(incubating) 0.3.0 available - posted by zhongqiang chen <zh...@apache.org> on 2023/07/27 14:04:21 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 1.1.2 released - posted by Haonan Hou <ha...@apache.org> on 2023/07/28 10:19:44 UTC, 0 replies.
- [ANNOUNCEMENT] Apache Commons Lang 3.13.0 - posted by Gary Gregory <gg...@apache.org> on 2023/07/28 20:52:09 UTC, 0 replies.
- CVE-2023-36542: Apache NiFi: Potential Code Injection with Properties Referencing Remote Resources - posted by David Handermann <ex...@apache.org> on 2023/07/29 02:25:39 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.0.0-RC2 Released - posted by Gregor Zurowski <gz...@apache.org> on 2023/07/30 09:48:03 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking Go 0.2.0 Released - posted by han liu <li...@apache.org> on 2023/07/31 08:02:39 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid protonj2 1.0.0-M17 released - posted by Timothy Bish <ta...@apache.org> on 2023/07/31 22:49:00 UTC, 0 replies.