You are viewing a plain text version of this content. The canonical link for it is here.
- CVE-2025-59789: Apache bRPC: Stack Exhaustion via Unbounded Recursion in JSON Parser - posted by Wang Weibing <ww...@apache.org> on 2025/12/01 02:26:07 UTC, 0 replies.
- ANNOUNCE: - posted by Emmanuel Lecharny <el...@apache.org> on 2025/12/01 08:29:48 UTC, 0 replies.
- ANNOUNCE: Apache MINA 2.2.5 released - posted by Emmanuel Lecharny <el...@apache.org> on 2025/12/01 08:40:43 UTC, 0 replies.
- [ANNOUNCE] Apache POI 5.5.1 release - posted by PJ Fanning <fa...@apache.org> on 2025/12/01 08:49:17 UTC, 0 replies.
- [ANNOUNCE] Grails Publish Gradle Plugin 0.0.3 - posted by James Daugherty <jd...@apache.org> on 2025/12/01 12:39:05 UTC, 0 replies.
- [ANN] CVE-2025-64775: Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - S2-068 - posted by Lukasz Lenart <lu...@apache.org> on 2025/12/01 14:44:54 UTC, 1 replies.
- [ANNOUNCE] Apache Grails 7.0.4 - posted by James Daugherty <jd...@apache.org> on 2025/12/01 14:52:41 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 24.09.04 released - posted by Jacopo Cappellato <ja...@apache.org> on 2025/12/02 14:45:56 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-12-01 are released - posted by Jens Scheffler <js...@apache.org> on 2025/12/02 22:06:20 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Exec 1.6.0 - posted by Gary Gregory <gg...@apache.org> on 2025/12/02 23:27:02 UTC, 0 replies.
- [ANNOUNCE] Apache Teaclave™ TrustZone SDK 0.7.0 Released - posted by Yuan Zhuang <yu...@apache.org> on 2025/12/03 07:44:22 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.3 Released - posted by Paul King <pa...@apache.org> on 2025/12/03 17:29:30 UTC, 0 replies.
- Apache Derby is now retired - posted by Richard Hillegas <rh...@apache.org> on 2025/12/03 17:38:15 UTC, 0 replies.
- CVE-2025-53960: Apache StreamPark: Use the user’s password as the secret key Vulnerability - posted by Huajie Wang <be...@apache.org> on 2025/12/04 02:14:56 UTC, 0 replies.
- [ANNOUNCE] Apache Flink 2.2.0 released - posted by Hang Ruan <ru...@apache.org> on 2025/12/04 03:10:49 UTC, 0 replies.
- [ANNOUNCEMENT] Apache HTTP Server 2.4.66 Released - posted by covener <co...@apache.org> on 2025/12/04 14:06:33 UTC, 0 replies.
- CVE-2025-66516: Apache Tika core, Apache Tika parsers, Apache Tika PDF parser module: Update to CVE-2025-54988 to expand scope of artifacts affected - posted by Tim Allison <ta...@apache.org> on 2025/12/04 14:18:38 UTC, 0 replies.
- CVE-2025-55753: Apache HTTP Server: mod_md (ACME), unintended retry intervals - posted by Eric Covener <co...@apache.org> on 2025/12/04 14:40:39 UTC, 0 replies.
- CVE-2025-58098: Apache HTTP Server: Server Side Includes adds query string to #exec cmd=... - posted by Eric Covener <co...@apache.org> on 2025/12/04 14:42:31 UTC, 0 replies.
- CVE-2025-59775: Apache HTTP Server: NTLM Leakage on Windows through UNC SSRF - posted by Eric Covener <co...@apache.org> on 2025/12/04 14:44:05 UTC, 0 replies.
- CVE-2025-65082: Apache HTTP Server: CGI environment variable override - posted by Eric Covener <co...@apache.org> on 2025/12/04 14:44:58 UTC, 0 replies.
- CVE-2025-66200: Apache HTTP Server: mod_userdir+suexec bypass via AllowOverride FileInfo - posted by Eric Covener <co...@apache.org> on 2025/12/04 14:45:37 UTC, 0 replies.
- [ANNOUNCE] Apache Fory 0.13.2 released - posted by Shawn Yang <ch...@apache.org> on 2025/12/04 16:41:51 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.113 available - posted by Rémy Maucherat <re...@apache.org> on 2025/12/07 15:32:13 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Text 1.15.0 - posted by Gary Gregory <gg...@apache.org> on 2025/12/07 23:10:36 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.15 Available - posted by Mark Thomas <ma...@apache.org> on 2025/12/08 09:28:52 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.50 Available - posted by Christopher Schultz <sc...@apache.org> on 2025/12/08 22:26:47 UTC, 0 replies.
- CVE-2025-26866: Apache HugeGraph-Server: RAFT and deserialization vulnerability - posted by VGalaxies <vg...@apache.org> on 2025/12/09 09:27:28 UTC, 1 replies.
- [ANNOUNCE] Apache SedonaDB 0.2.0 released - posted by Dewey Dunnington <pa...@apache.org> on 2025/12/09 14:57:55 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Pool 2.13.0 - posted by Gary Gregory <gg...@apache.org> on 2025/12/09 22:20:00 UTC, 0 replies.
- [ANN] CVE-2025-66675: Apache Struts: File leak in multipart request processing causes disk exhaustion (DoS) - version ranges fixed - posted by Lukasz Lenart <lu...@apache.org> on 2025/12/10 07:13:15 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.4 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2025/12/10 09:14:16 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.23.3-beta released - posted by Julian Reschke <re...@apache.org> on 2025/12/11 07:18:16 UTC, 0 replies.
- [ANNOUNCE] Apache OpenNLP 2.5.7 released - posted by Richard Zowalla <rz...@apache.org> on 2025/12/11 10:46:17 UTC, 0 replies.
- CVE-2025-23408: Apache Fineract: weak password policy - posted by Adam Monsen <me...@apache.org> on 2025/12/11 21:19:53 UTC, 0 replies.
- CVE-2025-58130: Apache Fineract: Server Key not masked - posted by Adam Monsen <me...@apache.org> on 2025/12/11 21:23:57 UTC, 0 replies.
- CVE-2025-58137: Apache Fineract: IDOR via self-service API - posted by Adam Monsen <me...@apache.org> on 2025/12/11 21:26:29 UTC, 0 replies.
- CVE-2025-66388: Apache Airflow: Secrets in rendered templates not redacted properly and exposed in the UI - posted by Ephraim Anierobi <ep...@apache.org> on 2025/12/12 09:03:55 UTC, 0 replies.
- CVE-2025-65995: Apache Airflow: Disclosure of secrets to UI via kwargs - posted by Ephraim Anierobi <ep...@apache.org> on 2025/12/12 09:04:06 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client C++ 4.0.0 released - posted by Yunze Xu <xy...@apache.org> on 2025/12/12 09:38:36 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko (Core) 1.4.0 released - posted by PJ Fanning <fa...@apache.org> on 2025/12/12 14:04:51 UTC, 0 replies.
- CVE-2025-54947: Apache StreamPark: Use hard-coded key vulnerability - posted by Huajie Wang <be...@apache.org> on 2025/12/12 14:57:25 UTC, 0 replies.
- CVE-2025-54981: Apache StreamPark: Weak Encryption Algorithm in StreamPark - posted by Huajie Wang <be...@apache.org> on 2025/12/12 15:01:04 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.5 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2025/12/12 22:21:53 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.7.1 Released - posted by David Handermann <ex...@apache.org> on 2025/12/13 02:48:54 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid Broker-J 10.0.1 released - posted by Tomas Vavricka <va...@apache.org> on 2025/12/13 10:09:47 UTC, 0 replies.
- [ANNOUNCE] Apache HBase Operator Tools 1.3.0 is now available for download - posted by Duo Zhang <zh...@apache.org> on 2025/12/13 13:54:35 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.10.8 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2025/12/13 15:50:50 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-12-09 are released - posted by Jarek Potiuk <po...@apache.org> on 2025/12/13 16:23:44 UTC, 0 replies.
- [ANNOUNCE] Apache log4cxx 1.6.0 released - posted by Stephen Webb <sw...@apache.org> on 2025/12/13 23:15:40 UTC, 0 replies.
- [ANNOUNCE] Apache TomEE 10.1.3 - posted by Richard Zowalla <rz...@apache.org> on 2025/12/14 11:28:57 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Management 1.2.0 released - posted by PJ Fanning <fa...@apache.org> on 2025/12/14 20:25:43 UTC, 0 replies.
- CVE-2025-67895: Apache Airflow Providers Edge3: Edge3 Worker RPC RCE on Airflow 2 - posted by Jarek Potiuk <po...@apache.org> on 2025/12/15 11:28:48 UTC, 0 replies.
- [ANNOUNCE] Apache StreamPipes 0.98.0 - posted by Philipp Zehnder <ze...@apache.org> on 2025/12/15 15:42:04 UTC, 0 replies.
- [ANNOUNCE] Apache Commons DBCP 2.14.0 - posted by Gary Gregory <gg...@apache.org> on 2025/12/16 12:05:27 UTC, 0 replies.
- [ANNOUNCEMENT] Commons Daemon 1.5.1 Released - posted by Mark Thomas <ma...@apache.org> on 2025/12/16 13:46:28 UTC, 0 replies.
- [ANN] Apache Maven 3.9.12 released - posted by Slawomir Jaranowski <sj...@apache.org> on 2025/12/16 21:14:10 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.4 GA released - posted by Oleg Kalnichevski <ol...@apache.org> on 2025/12/18 11:07:43 UTC, 0 replies.
- Apache Beam 2.70.0 Released! - posted by Vitalii Terentev <vt...@apache.org> on 2025/12/18 12:27:18 UTC, 0 replies.
- CVE-2025-68161: Apache Log4j Core: Missing TLS hostname verification in Socket appender - posted by Piotr Karwasz <pk...@apache.org> on 2025/12/18 19:09:46 UTC, 0 replies.
- CVE-2025-66524: Apache NiFi: Deserialization of Untrusted Data in GetAsanaObject Processor - posted by David Handermann <ex...@apache.org> on 2025/12/18 19:52:13 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.7.2 Released - posted by David Handermann <ex...@apache.org> on 2025/12/19 03:11:59 UTC, 0 replies.
- [ANNOUNCE] Apache Mynewt 1.14.0 and Apache Mynewt NimBLE 1.9.0 released - posted by Szymon Janc <ja...@apache.org> on 2025/12/19 17:42:19 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Persistence JDBC 1.2.0 released - posted by PJ Fanning <fa...@apache.org> on 2025/12/21 11:25:31 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Client 5.5.2 GA Released - posted by Oleg Kalnichevski <ol...@apache.org> on 2025/12/22 10:49:40 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Client 5.6 GA Released - posted by Oleg Kalnichevski <ol...@apache.org> on 2025/12/22 10:55:08 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 1.1.3 released - posted by Haonan Hou <ha...@apache.org> on 2025/12/25 03:09:28 UTC, 0 replies.
- CVE-2025-68637: : Insecure SSL Configuration in Uniffle HTTP Client - posted by roryqi <ro...@apache.org> on 2025/12/27 10:33:32 UTC, 0 replies.
- [ANNOUNCE] Apache Gravitino 1.1.0 is available - posted by Qi Yu <yu...@apache.org> on 2025/12/29 06:54:05 UTC, 0 replies.
- [ANNOUNCE] Apache CloudStack Kubernetes Provider v1.2.0 - posted by Vishesh <vi...@apache.org> on 2025/12/29 10:25:55 UTC, 0 replies.
- CVE-2025-47411: Apache StreamPipes: Leverage of User ID for Privilege Escalation - posted by Philipp Zehnder <ze...@apache.org> on 2025/12/29 14:17:45 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Node.js client 1.16.0 released - posted by Baodi Shi <ba...@apache.org> on 2025/12/30 01:35:19 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 2.2.0 released - posted by Haonan Hou <ha...@apache.org> on 2025/12/31 02:06:02 UTC, 0 replies.
- [ANNOUNCE] Apache EventMesh 1.12.0 available - posted by mikexue <mi...@apache.org> on 2025/12/31 06:41:34 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi v1.11.0 is available - posted by Cheng Pan <ch...@apache.org> on 2025/12/31 09:26:19 UTC, 0 replies.
- CVE-2025-48768: Apache NuttX RTOS: fs/inode: fs_inoderemove root inode removal - posted by Tomasz Cedro <ce...@apache.org> on 2025/12/31 13:46:53 UTC, 0 replies.
- CVE-2025-48769: Apache NuttX RTOS: fs/vfs/fs_rename: use after free - posted by Tomasz Cedro <ce...@apache.org> on 2025/12/31 13:48:51 UTC, 0 replies.