You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache APISIX Ingress controller v2.0.0-rc1 released - posted by Xin Rong <al...@apache.org> on 2025/07/01 09:30:00 UTC, 0 replies.
- [SECURITY] CVE-2024-35164: Apache Guacamole: Improper input validation of console codes - posted by Michael Jumper <mj...@apache.org> on 2025/07/01 17:19:12 UTC, 0 replies.
- CVE-2025-46647: Apache APISIX: improper validation of issuer from introspection discovery url in plugin openid-connect - posted by Junxu Chen <ch...@apache.org> on 2025/07/02 01:08:55 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.14.0 released - posted by Baodi Shi <ba...@apache.org> on 2025/07/02 04:29:02 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.82.0 released - posted by Julian Reschke <re...@apache.org> on 2025/07/02 08:14:16 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow JS 21.0.0 released - posted by Sutou Kouhei <ko...@apache.org> on 2025/07/04 07:10:07 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.43 Available - posted by Christopher Schultz <sc...@apache.org> on 2025/07/04 19:54:48 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.9 Available - posted by Mark Thomas <ma...@apache.org> on 2025/07/04 20:02:48 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.107 available - posted by Rémy Maucherat <re...@apache.org> on 2025/07/04 21:02:33 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 03, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/07/06 08:50:43 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow ADBC 19 Released - posted by David Li <li...@apache.org> on 2025/07/07 06:44:09 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow Swift 21.0.0 released - posted by Sutou Kouhei <ko...@apache.org> on 2025/07/07 06:54:56 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.13.0 Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/07/08 12:35:37 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 2.0.4 released - posted by Haonan Hou <ha...@apache.org> on 2025/07/09 07:34:45 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Validator 1.10.0 - posted by Gary Gregory <gg...@apache.org> on 2025/07/09 15:22:03 UTC, 0 replies.
- [ANNOUNCE] Apache Tika 3.2.1 released - posted by Tim Allison <ta...@apache.org> on 2025/07/09 21:51:31 UTC, 0 replies.
- [ANNOUNCE] Release Apache Fory(incubating) 0.11.2 - posted by Pan Li <pa...@apache.org> on 2025/07/10 10:55:54 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.64 Released - posted by covener <co...@apache.org> on 2025/07/10 15:46:39 UTC, 0 replies.
- [ANNOUNCE] Apache KIE (Incubating) 10.1.0 released - posted by Alex Porcelli <po...@apache.org> on 2025/07/10 17:08:07 UTC, 0 replies.
- CVE-2024-42516: Apache HTTP Server: HTTP response splitting - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:12:28 UTC, 0 replies.
- CVE-2024-43204: Apache HTTP Server: SSRF with mod_headers setting Content-Type header - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:12:36 UTC, 0 replies.
- CVE-2024-43394: Apache HTTP Server: SSRF on Windows due to UNC paths - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:13:47 UTC, 0 replies.
- CVE-2024-47252: Apache HTTP Server: mod_ssl error log variable escaping - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:13:54 UTC, 0 replies.
- CVE-2025-23048: Apache HTTP Server: mod_ssl access control bypass with session resumption - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:14:04 UTC, 0 replies.
- CVE-2025-49630: Apache HTTP Server: mod_proxy_http2 denial of service - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:14:09 UTC, 0 replies.
- CVE-2025-49812: Apache HTTP Server: mod_ssl TLS upgrade attack - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:14:18 UTC, 0 replies.
- CVE-2025-53020: Apache HTTP Server: HTTP/2 DoS by Memory Increase - posted by Eric Covener <co...@apache.org> on 2025/07/10 17:14:24 UTC, 0 replies.
- [SECURITY] CVE-2025-52434 Apache Tomcat -APR/native Connector crash leading to DoS - posted by Mark Thomas <ma...@apache.org> on 2025/07/10 18:56:22 UTC, 0 replies.
- [SECURITY] CVE-2025-52520 Apache Tomcat - DoS in multipart upload - posted by Mark Thomas <ma...@apache.org> on 2025/07/10 18:56:28 UTC, 1 replies.
- [SECURITY] CVE-2025-53506 Apache Tomcat - DoS in HTP/2 - posted by Mark Thomas <ma...@apache.org> on 2025/07/10 18:56:33 UTC, 1 replies.
- [ANNOUNCE] Apache Commons Lang 3.18.0 - posted by Gary Gregory <gg...@apache.org> on 2025/07/10 22:31:53 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX Ingress controller v2.0.0-rc2 released - posted by Xin Rong <al...@apache.org> on 2025/07/11 02:00:00 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client C++ 3.7.2 released - posted by Yunze Xu <xy...@apache.org> on 2025/07/11 07:37:17 UTC, 1 replies.
- CVE-2025-48924: Apache Commons Lang, Apache Commons Lang: ClassUtils.getClass(...) can throw a StackOverflowError on very long inputs - posted by "Gary D. Gregory" <gg...@apache.org> on 2025/07/11 14:25:52 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `2.25.1` released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2025/07/11 19:02:48 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 08, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/07/12 06:49:47 UTC, 0 replies.
- https://issues.apache.org/jira/browse/ZEPPELIN-6101: CVE-2024-41169: Apache Zeppelin: raft directory listing and file read - posted by PJ Fanning <fa...@apache.org> on 2025/07/12 16:06:43 UTC, 0 replies.
- [ANNOUNCE] Apache Wicket 10.6.0 released - posted by Andrea Del Bene <ad...@apache.org> on 2025/07/12 19:17:26 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.23.2-beta released - posted by Julian Reschke <re...@apache.org> on 2025/07/14 08:12:08 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.22.1 released - posted by Julian Reschke <re...@apache.org> on 2025/07/14 08:12:53 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.20.17 released - posted by Julian Reschke <re...@apache.org> on 2025/07/14 08:13:48 UTC, 0 replies.
- [IMPORTANT] [ANNOUNCE] Critical Vulnerability in Apache Jackrabbit - posted by Julian Reschke <re...@apache.org> on 2025/07/14 08:45:52 UTC, 0 replies.
- CVE-2025-53689: Apache Jackrabbit: XXE vulnerability in jackrabbit-spi-commons - posted by Julian Reschke <re...@apache.org> on 2025/07/14 09:11:41 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi API 2.2.0 Released - posted by David Handermann <ex...@apache.org> on 2025/07/14 13:38:00 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 2.1.0 released - posted by Colin Lee <co...@apache.org> on 2025/07/14 16:01:28 UTC, 0 replies.
- [ANNOUNCE] Apache HBase 2.6.3 is now available for download - posted by Duo Zhang <zh...@apache.org> on 2025/07/15 13:58:51 UTC, 0 replies.
- CVE-2025-48795: Apache CXF: Denial of Service and sensitive data exposure in logs - posted by Colm O hEigeartaigh <co...@apache.org> on 2025/07/15 14:02:17 UTC, 0 replies.
- [ANN] Apache Maven 3.9.11 released - posted by Slawomir Jaranowski <sj...@apache.org> on 2025/07/15 21:23:30 UTC, 0 replies.
- [ANNOUNCE] Apache Grails (incubating) 7.0.0-M5 - posted by James Daugherty <jd...@apache.org> on 2025/07/16 05:03:59 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 4.3.1 released - posted by David Jensen <dj...@apache.org> on 2025/07/16 07:37:35 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Core) 1.1.5 released - posted by PJ Fanning <fa...@apache.org> on 2025/07/17 17:59:54 UTC, 0 replies.
- [ANNOUNCE] Apache Doris 3.0.6.1 released - posted by ChenMingyu <mo...@apache.org> on 2025/07/18 01:54:49 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 17, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/07/18 21:09:58 UTC, 0 replies.
- [ANNOUNCE] Apache Commons IO 2.20.0 - posted by Gary Gregory <gg...@apache.org> on 2025/07/18 22:29:17 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.0.3 reference images rebuilt - posted by Jarek Potiuk <po...@apache.org> on 2025/07/19 01:59:55 UTC, 0 replies.
- [ANN] Struts Annotations 2.0 - posted by Lukasz Lenart <lu...@apache.org> on 2025/07/19 07:17:49 UTC, 0 replies.
- CVE-2025-49656: Apache Jena: Administrative users can create files outside the server directory space via the admin UI - posted by Andy Seaborne <an...@apache.org> on 2025/07/21 07:22:53 UTC, 0 replies.
- CVE-2025-50151: Apache Jena: Configuration files uploaded by administrative users are not check properly - posted by Andy Seaborne <an...@apache.org> on 2025/07/21 07:23:02 UTC, 0 replies.
- [ANNOUNCE] Apache Nutch 1.21 Release - posted by Sebastian Nagel <sn...@apache.org> on 2025/07/21 18:32:38 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Core) 1.2.0-M2 released - posted by PJ Fanning <fa...@apache.org> on 2025/07/21 19:28:08 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow 21.0.0 released - posted by Bryce Mecum <br...@apache.org> on 2025/07/21 20:51:57 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client Python 3.8.0 released - posted by Yunze Xu <xy...@apache.org> on 2025/07/22 01:28:05 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Codec 1.19.0 - posted by Gary Gregory <gg...@apache.org> on 2025/07/22 19:45:24 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.5.0 Released - posted by Pierre Villard <pv...@apache.org> on 2025/07/22 19:53:22 UTC, 0 replies.
- [ANNOUNCE] Apache OpenNLP 2.5.5 released - posted by Martin Wiesner <ma...@apache.org> on 2025/07/23 10:44:08 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.0-beta-2 - posted by Paul King <pa...@apache.org> on 2025/07/23 11:28:18 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 4.0.28 Released - posted by Paul King <pa...@apache.org> on 2025/07/23 11:29:08 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.65 Released - posted by covener <co...@apache.org> on 2025/07/23 12:08:10 UTC, 0 replies.
- CVE-2025-54090: Apache HTTP Server: 'RewriteCond expr' always evaluates to true in 2.4.64 - posted by Eric Covener <co...@apache.org> on 2025/07/23 12:14:07 UTC, 0 replies.
- [ANNOUNCE] Apache Curator 5.9.0 released - posted by Kezhu Wang <ke...@apache.org> on 2025/07/23 20:11:22 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi Shaded v0.6.0 is available - posted by Cheng Pan <ch...@apache.org> on 2025/07/24 05:47:01 UTC, 0 replies.
- [ANNOUNCE] Apache James MIME4J 0.8.13 released - posted by "btellier@apache.org" <bt...@apache.org> on 2025/07/25 12:54:34 UTC, 0 replies.
- [ANNOUNCE] Apache bRPC 1.14.0 released - posted by Weibing Wang <ww...@apache.org> on 2025/07/28 03:29:38 UTC, 0 replies.
- [ANNOUNCE] Apache Fineract 1.12.1 Release - posted by Adam Monsen <me...@apache.org> on 2025/07/28 22:30:26 UTC, 0 replies.
- [ANNOUNCE] Apache Fortress 3.0.1 Released - posted by Shawn McKinney <sm...@apache.org> on 2025/07/29 23:06:34 UTC, 0 replies.
- CVE-2025-54656: Apache Struts Extras: Improper Output Neutralization for Logs - posted by Arnout Engelen <en...@apache.org> on 2025/07/30 13:21:47 UTC, 0 replies.
- [ANNOUNCE] Apache JSPWiki 2.12.3 released - posted by Juan Pablo Santos Rodríguez <ju...@apache.org> on 2025/07/30 18:37:21 UTC, 0 replies.
- CVE-2025-24853: Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Header Link processing - posted by Juan Pablo Santos Rodríguez <ju...@apache.org> on 2025/07/30 18:49:02 UTC, 0 replies.
- CVE-2025-24854: Apache JSPWiki: Cross-Site Scripting (XSS) in JSPWiki Image plugin - posted by Juan Pablo Santos Rodríguez <ju...@apache.org> on 2025/07/30 18:53:52 UTC, 0 replies.
- [ANNOUNCE] Apache Ranger 2.7.0 released - posted by Madhan Neethiraj <ma...@apache.org> on 2025/07/30 20:29:50 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.0.13 released - posted by Lari Hotari <lh...@apache.org> on 2025/07/31 13:21:06 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.3.8 released - posted by Lari Hotari <lh...@apache.org> on 2025/07/31 13:35:38 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.0.6 released - posted by Lari Hotari <lh...@apache.org> on 2025/07/31 14:58:37 UTC, 0 replies.