You are viewing a plain text version of this content. The canonical link for it is here.
- CVE-2025-30065: Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata - posted by Gang Wu <ga...@apache.org> on 2025/04/01 02:03:08 UTC, 0 replies.
- CVE-2025-29868: Apache Answer: Using externally referenced images can leak user privacy. - posted by Enxin Xie <li...@apache.org> on 2025/04/01 02:44:41 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.8.6 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/04/01 08:42:23 UTC, 0 replies.
- CVE-2025-30177: Apache Camel: Camel-Undertow Message Header Injection via Improper Filtering - posted by Andrea Cosentino <ac...@apache.org> on 2025/04/01 10:15:20 UTC, 0 replies.
- CVE-2025-30676: Apache OFBiz: Stored XSS Vulnerability - posted by Jacques Le Roux <jl...@apache.org> on 2025/04/01 14:36:49 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 18.12.19 released - posted by Nicolas Malin <nm...@apache.org> on 2025/04/01 14:37:29 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Helm Chart version 1.16.0 Released - posted by Jedidiah Cunningham <je...@apache.org> on 2025/04/02 03:22:46 UTC, 0 replies.
- [ANNOUNCE] Apache Traffic Server 10.0.5 Release - posted by Chris McFarlen <cm...@apache.org> on 2025/04/02 19:27:28 UTC, 0 replies.
- [ANNOUNCE] Release Apache SkyWalking Client JS version 1.0.0 - posted by xue fan <qi...@apache.org> on 2025/04/03 14:27:59 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.11.0 Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/04/03 17:26:40 UTC, 0 replies.
- Apache Beam 2.64.0 Released! - posted by XQ Hu <xq...@apache.org> on 2025/04/03 18:21:32 UTC, 0 replies.
- Apache Pivot is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2025/04/03 23:00:11 UTC, 0 replies.
- Apache Oozie is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2025/04/04 06:06:43 UTC, 0 replies.
- CVE-2025-30473: Apache Airflow Common SQL Provider: Remote Code Execution via Sql Injection - posted by Elad Kalif <el...@apache.org> on 2025/04/04 18:54:21 UTC, 0 replies.
- [ANNOUNCE] Apache POI 5.4.1 release - posted by PJ Fanning <fa...@apache.org> on 2025/04/06 18:11:41 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 24.09.01 released - posted by Nicolas Malin <nm...@apache.org> on 2025/04/07 15:36:10 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.78.0 released - posted by Julian Reschke <re...@apache.org> on 2025/04/08 04:31:52 UTC, 0 replies.
- CVE-2025-31672: Apache POI: parsing OOXML based files (xlsx, docx, etc.), poi-ooxml could read unexpected data if underlying zip has duplicate zip entry names - posted by PJ Fanning <fa...@apache.org> on 2025/04/08 10:44:37 UTC, 0 replies.
- [ANN] Apache Causeway version 3.3.0 Released - posted by Dan Haywood <da...@apache.org> on 2025/04/08 23:56:41 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.6 Available - posted by Mark Thomas <ma...@apache.org> on 2025/04/09 10:30:35 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.0.11 released - posted by Lari Hotari <lh...@apache.org> on 2025/04/09 10:32:07 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.3.6 released - posted by Lari Hotari <lh...@apache.org> on 2025/04/09 10:33:09 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.0.4 released - posted by Lari Hotari <lh...@apache.org> on 2025/04/09 10:33:54 UTC, 0 replies.
- CVE-2025-30677: Apache Pulsar IO Kafka Connector, Apache Pulsar IO Kafka Connect Adaptor: Sensitive information logged in Pulsar's Apache Kafka Connectors - posted by Lari Hotari <lh...@apache.org> on 2025/04/09 10:59:04 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on April 06, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/04/09 12:17:12 UTC, 0 replies.
- [ANNOUNCE] Apache Geronimo XBean 4.27 released - posted by Francois Papon <fp...@apache.org> on 2025/04/09 14:11:31 UTC, 0 replies.
- CVE-2025-27391: Apache ActiveMQ Artemis: Passwords leaking from broker properties in the debug log - posted by Domenico Francesco Bruscino <br...@apache.org> on 2025/04/09 14:34:10 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.104 available - posted by Rémy Maucherat <re...@apache.org> on 2025/04/09 19:42:10 UTC, 0 replies.
- [ANNOUNCE] Apache Lucene 10.2.0 released - posted by Ignacio Vera <iv...@apache.org> on 2025/04/10 10:48:14 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.40 Available - posted by Christopher Schultz <sc...@apache.org> on 2025/04/10 17:09:55 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Text 1.13.1 - posted by Gary Gregory <gg...@apache.org> on 2025/04/11 10:36:37 UTC, 0 replies.
- CVE-2025-24859: Apache Roller: Insufficient Session Expiration on Password Change - posted by "David M. Johnson" <sn...@apache.org> on 2025/04/11 22:32:42 UTC, 0 replies.
- [ANNOUNCE] Apache Commons IO 2.19.0 - posted by Gary Gregory <gg...@apache.org> on 2025/04/12 01:30:26 UTC, 0 replies.
- CVE-2025-32896: Apache SeaTunnel: Unauthenticated insecure access - posted by Hailin Wang <wa...@apache.org> on 2025/04/12 05:56:55 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on April 10, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/04/14 07:22:28 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 2.0.2 released - posted by Haonan Hou <ha...@apache.org> on 2025/04/15 03:19:34 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 1.1.1 released - posted by Haonan Hou <ha...@apache.org> on 2025/04/15 03:24:21 UTC, 0 replies.
- CVE-2024-56736: Apache HertzBeat (incubating): Server-Side Request Forgery (SSRF) in Api Config Oss - posted by Chao Gong <go...@apache.org> on 2025/04/16 11:15:56 UTC, 0 replies.
- [ANNOUNCE] Apache Commons JEXL Version 3.5.0 - posted by Gary Gregory <gg...@apache.org> on 2025/04/16 13:36:31 UTC, 0 replies.
- [ANNOUNCE] OpenNLP 2.5.4 released - posted by Martin Wiesner <ma...@apache.org> on 2025/04/16 19:50:10 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 1.3.4 released - posted by Haonan Hou <ha...@apache.org> on 2025/04/18 02:16:59 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 2.0.2 released - posted by Haonan Hou <ha...@apache.org> on 2025/04/18 02:19:50 UTC, 0 replies.
- [ANNOUNCE] Apache Commons JXPath 1.4.0 - posted by Gary Gregory <gg...@apache.org> on 2025/04/18 13:10:53 UTC, 0 replies.
- CVE-2025-29953: Apache ActiveMQ NMS OpenWire Client: deserialization allowlist bypass - posted by Arnout Engelen <en...@apache.org> on 2025/04/18 15:22:43 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on April 16, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/04/19 17:36:41 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on April 20, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/04/21 17:48:53 UTC, 0 replies.
- [ANNOUNCE] Released Reactive client for Apache Pulsar, version 0.6.0 - posted by Chris Bono <on...@apache.org> on 2025/04/21 21:55:28 UTC, 0 replies.
- [ANNOUNCE] Release Apache Kvrocks 2.12.0 - posted by hulk <hu...@apache.org> on 2025/04/22 05:35:53 UTC, 0 replies.
- CVE-2025-26413: Apache Kvrocks: The server was crashed by the negative offset - posted by Hulk Lin <hu...@apache.org> on 2025/04/22 05:36:49 UTC, 0 replies.
- [ANNOUNCE] Apache flink-connector-jdbc 3.3.0 & 4.0.0 released - posted by Hang Ruan <ru...@apache.org> on 2025/04/22 09:54:07 UTC, 0 replies.
- [ANNOUNCE] Apache SystemDS 3.3.0 - posted by Janardhan <ja...@apache.org> on 2025/04/22 16:17:35 UTC, 1 replies.
- [ANNOUNCE] Apache Commons Collections 4.5.0 - posted by Gary Gregory <gg...@apache.org> on 2025/04/23 01:43:09 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 4.2.3 released - posted by David Jensen <dj...@apache.org> on 2025/04/23 09:08:29 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Go Client 0.15.0 released - posted by Zike Yang <zi...@apache.org> on 2025/04/23 10:59:33 UTC, 0 replies.
- The Apache Software Foundation (ASF) welcomes 45 new Members - posted by Brian Proffitt <bk...@apache.org> on 2025/04/24 12:46:02 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 2.0.34 released - posted by Andreas Lehmkühler <le...@apache.org> on 2025/04/24 18:35:30 UTC, 0 replies.
- [ANNOUNCE] Apache Wicket 9.21.0 released - posted by Andrea Del Bene <ad...@apache.org> on 2025/04/25 11:42:27 UTC, 0 replies.
- [ANNOUNCE] Apache Wicket 10.5.0 released - posted by Andrea Del Bene <ad...@apache.org> on 2025/04/25 17:42:45 UTC, 0 replies.
- [ANNOUNCEMENT] Apache SkyWalking Go 0.6.0 Released - posted by han liu <li...@apache.org> on 2025/04/28 03:57:58 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on April 24, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/04/28 07:46:20 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Client 5.4.4 GA Released - posted by Oleg Kalnichevski <ol...@apache.org> on 2025/04/28 15:27:09 UTC, 0 replies.
- [SECURITY] CVE-2025-31650 Apache Tomcat - DoS via invalid HTTP prioritization header - posted by Mark Thomas <ma...@apache.org> on 2025/04/28 19:10:08 UTC, 0 replies.
- [SECURITY] CVE-2025-31651 Apache Tomcat - Rewrite rule bypass - posted by Mark Thomas <ma...@apache.org> on 2025/04/28 19:10:33 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on April 28, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/04/29 10:25:33 UTC, 0 replies.
- [ANNOUNCEMENT] Apache Commons Configuration 2.12.0 - posted by Rob Tompkins <ch...@apache.org> on 2025/04/29 16:10:29 UTC, 0 replies.
- Apache Mnemonic is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2025/04/29 23:15:01 UTC, 0 replies.
- Apache Gora is now retired - posted by Hervé Boutemy <hb...@apache.org> on 2025/04/29 23:16:29 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.10.4 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/04/30 14:47:34 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Imaging 1.0.0-alpha6 - posted by Gary Gregory <gg...@apache.org> on 2025/04/30 18:19:27 UTC, 0 replies.