You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache Jackrabbit 2.22.2 released - posted by Julian Reschke <re...@apache.org> on 2025/08/01 07:50:03 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on July 29, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/08/02 07:02:36 UTC, 0 replies.
- [ANNOUNCE] Apache Commons CLI 1.10.0 - posted by Gary Gregory <gg...@apache.org> on 2025/08/02 23:28:01 UTC, 0 replies.
- [ANNOUNCE] Apache Grails (incubating) Plugins compatible with 7.0.0-M5 - posted by James Daugherty <jd...@apache.org> on 2025/08/03 00:41:01 UTC, 0 replies.
- [ANNOUNCE] Apache log4cxx 1.5.0 released - posted by Stephen Webb <sw...@apache.org> on 2025/08/03 04:30:22 UTC, 0 replies.
- CVE-2024-52279: Apache Zeppelin: Arbitrary file read by adding malicious JDBC connection string - posted by PJ Fanning <fa...@apache.org> on 2025/08/03 09:59:20 UTC, 0 replies.
- CVE-2024-41177: Apache Zeppelin: XSS in the Helium module - posted by PJ Fanning <fa...@apache.org> on 2025/08/03 10:07:24 UTC, 0 replies.
- CVE-2024-51775: Apache Zeppelin: Command Injection via CSWSH - posted by PJ Fanning <fa...@apache.org> on 2025/08/03 10:11:43 UTC, 0 replies.
- [ANNOUNCE] Apache Storm 2.8.2 Released - posted by Rui Abreu <ra...@apache.org> on 2025/08/03 21:07:31 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 24.09.02 released - posted by Nicolas Malin <nm...@apache.org> on 2025/08/04 12:40:58 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX Ingress controller v2.0.0-rc3 released - posted by Xin Rong <al...@apache.org> on 2025/08/04 13:00:00 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Go Client 0.16.0 released - posted by Zike Yang <zi...@apache.org> on 2025/08/05 04:13:43 UTC, 0 replies.
- CVE-2025-54466: Apache OFBiz: RCE Vulnerability in scrum plugin - posted by Nicolas Malin <nm...@apache.org> on 2025/08/05 06:46:35 UTC, 0 replies.
- [ANNOUNCE] Apache bRPC 1.14.1 released - posted by Weibing Wang <ww...@apache.org> on 2025/08/06 06:25:47 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Helm Chart version 4.2.0 Released - posted by Lari Hotari <lh...@apache.org> on 2025/08/06 08:22:47 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.0-rc-1 Released! - posted by Paul King <pa...@apache.org> on 2025/08/06 10:54:01 UTC, 0 replies.
- Apache jclouds is now retired - posted by Niall Pemberton <ni...@apache.org> on 2025/08/06 14:52:09 UTC, 1 replies.
- [ANN] Apache Tomcat 9.0.108 available - posted by Rémy Maucherat <re...@apache.org> on 2025/08/06 17:48:39 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.10 Available - posted by Mark Thomas <ma...@apache.org> on 2025/08/07 08:36:18 UTC, 0 replies.
- [SECURITY] Upcoming updates to recent(ish)Tomcat CVEs - posted by Mark Thomas <ma...@apache.org> on 2025/08/07 10:41:37 UTC, 0 replies.
- CVE-2025-53606: Apache Seata (incubating): Deserialization of untrusted Data in Apache Seata Server - posted by Min Ji <ji...@apache.org> on 2025/08/07 15:04:54 UTC, 0 replies.
- CVE-2025-48913: Apache CXF: Untrusted JMS configuration can lead to RCE - posted by Colm O hEigeartaigh <co...@apache.org> on 2025/08/07 15:55:12 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.44 Available - posted by Christopher Schultz <sc...@apache.org> on 2025/08/07 16:32:05 UTC, 0 replies.
- [ANNOUNCE] Apache Tika 3.2.2 released - posted by Tim Allison <ta...@apache.org> on 2025/08/08 04:56:13 UTC, 0 replies.
- [ANNOUNCE] Apache Grails (incubating) 7.0.0-RC1 - posted by James Daugherty <jd...@apache.org> on 2025/08/11 00:54:20 UTC, 0 replies.
- [ANNOUNCE] Apache YuniKorn v1.7.0 released - posted by Wilfred Spiegelenburg <wi...@apache.org> on 2025/08/11 01:42:20 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on August 07, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/08/11 05:40:37 UTC, 0 replies.
- [ANN] Apache Syncope 4.0.1 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/08/11 12:38:37 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.13 - posted by Francesco Chicchiriccò <il...@apache.org> on 2025/08/11 12:40:27 UTC, 0 replies.
- CVE-2025-54472: Apache bRPC: Redis Parser Remote Denial of Service - posted by Wang Weibing <ww...@apache.org> on 2025/08/12 02:09:14 UTC, 0 replies.
- Apache Beam 2.67.0 Released! - posted by Vitalii Terentev <vt...@apache.org> on 2025/08/12 18:34:55 UTC, 0 replies.
- [ANNOUNCE] Apache Allura 1.18.0 released - posted by Dave Brondsema <br...@apache.org> on 2025/08/12 21:07:31 UTC, 0 replies.
- [ANNOUNCE] Apache Fory Graduates to Top-Level Project! - posted by Shawn Yang <ch...@apache.org> on 2025/08/13 05:07:53 UTC, 0 replies.
- [SECURITY] CVE-2025-48989 Apache Tomcat - DoS in HTP/2 - Made You Reset - posted by Mark Thomas <ma...@apache.org> on 2025/08/13 12:07:02 UTC, 0 replies.
- [SECURITY] CVE-2025-55668 Apache Tomcat - Session fixation via rewrite valve - posted by Mark Thomas <ma...@apache.org> on 2025/08/13 13:14:07 UTC, 0 replies.
- [ANNOUNCE] Apache Traffic Server 10.1.0 Release - posted by Chris McFarlen <cm...@apache.org> on 2025/08/13 20:51:11 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.84.0 released - posted by Julian Reschke <re...@apache.org> on 2025/08/14 09:06:06 UTC, 0 replies.
- CVE-2025-55673: Apache Superset: Metadata exposure in embedded charts - posted by Daniel Gaspar <dp...@apache.org> on 2025/08/14 11:33:43 UTC, 0 replies.
- CVE-2025-55672: Apache Superset: Store XSS on charts metadata - posted by Daniel Gaspar <dp...@apache.org> on 2025/08/14 11:36:39 UTC, 0 replies.
- CVE-2025-55674: Apache Superset: Improper SQL authorisation, parse not checking for specific engine functions - posted by Daniel Gaspar <dp...@apache.org> on 2025/08/14 11:41:18 UTC, 0 replies.
- CVE-2025-55675: Apache Superset: Incorrect datasource authorization on REST API - posted by Daniel Gaspar <dp...@apache.org> on 2025/08/14 11:43:28 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on August 12, 2025 are released - posted by Elad Kalif <el...@apache.org> on 2025/08/17 18:29:04 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 2.1.1 released - posted by Haonan Hou <ha...@apache.org> on 2025/08/18 03:32:18 UTC, 0 replies.
- [ANNOUNCE] Apache Fory 0.12.0 released - posted by Shawn Yang <ch...@apache.org> on 2025/08/18 12:48:24 UTC, 0 replies.
- CVE-2025-53192: Apache Commons OGNL: Expression Injection leading to RCE - posted by Arnout Engelen <en...@apache.org> on 2025/08/18 20:07:24 UTC, 0 replies.
- Re: CVE-2024-39954: Apache EventMesh Runtime: SSRF - posted by Eason Chen <ch...@apache.org> on 2025/08/19 07:19:57 UTC, 0 replies.
- [ANNOUNCE] Apache TomEE 10.1.1 - posted by Markus Jung <ju...@apache.org> on 2025/08/19 13:35:27 UTC, 0 replies.
- [ANNOUNCE] Apache Karaf runtime 4.4.8 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/08/19 15:22:22 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.14.0 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/08/20 05:15:07 UTC, 0 replies.
- [ANNOUNCE] Apache Polaris (incubating) 1.0.1-incubating has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2025/08/20 05:51:53 UTC, 0 replies.
- CVE-2025-54988: Apache Tika PDF parser module: XXE vulnerability in PDFParser's handling of XFA - posted by Tim Allison <ta...@apache.org> on 2025/08/20 19:45:49 UTC, 0 replies.
- [ANNOUNCE] Apache Accumulo 2.1.4 - posted by Christopher <ct...@apache.org> on 2025/08/21 02:36:31 UTC, 1 replies.
- [ANNOUNCE] Apache IoTDB 2.0.5 released - posted by Haonan Hou <ha...@apache.org> on 2025/08/22 01:34:01 UTC, 0 replies.
- [ANNOUNCE] Apache NetBeans 27 Released - posted by Neil C Smith <ne...@apache.org> on 2025/08/22 11:14:50 UTC, 0 replies.
- [ANNOUNCE] Apache flink-connector-kafka 4.0.1 release - posted by Fabian Paul <fp...@apache.org> on 2025/08/22 12:17:22 UTC, 0 replies.
- CVE-2024-48988: Apache StreamPark: SQL injection vulnerability - posted by Huajie Wang <be...@apache.org> on 2025/08/22 16:11:35 UTC, 0 replies.
- CVE-2025-54812: Apache Log4cxx: Improper HTML escaping in HTMLLayout - posted by Piotr Karwasz <pk...@apache.org> on 2025/08/22 18:15:35 UTC, 0 replies.
- CVE-2025-54813: Apache Log4cxx: Improper escaping with JSONLayout - posted by Piotr Karwasz <pk...@apache.org> on 2025/08/22 18:17:25 UTC, 0 replies.
- [ANNOUNCE] Apache log4net 3.2.0 released - posted by Jan Friedrich <fr...@apache.org> on 2025/08/22 20:33:06 UTC, 0 replies.
- [ANNOUNCE] Apache MINA SSHD 2.16.0 released - posted by Thomas Wolf <tw...@apache.org> on 2025/08/23 17:46:26 UTC, 0 replies.
- Apache MINA SSHD 2.16.0 released - posted by Thomas Wolf <tw...@apache.org> on 2025/08/23 18:25:17 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.0 Released! - posted by Paul King <pa...@apache.org> on 2025/08/24 05:10:51 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi API 2.3.0 Released - posted by Pierre Villard <pv...@apache.org> on 2025/08/24 08:46:24 UTC, 0 replies.
- [ANNOUNCE] Apache Cloudberry (Incubating) 2.0.0 Released - posted by Ed Espino <es...@apache.org> on 2025/08/25 07:27:40 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 1.14.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2025/08/25 12:11:34 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 2.8.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2025/08/25 12:12:53 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid protonj2 1.0.0 released - posted by Timothy Bish <ta...@apache.org> on 2025/08/29 21:58:35 UTC, 0 replies.
- [ANNOUNCE] Apache SpamAssassin 4.0.2 available - posted by Giovanni Bechis <gb...@apache.org> on 2025/08/30 14:08:09 UTC, 0 replies.