You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache Camel 4.14.3 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/01/01 14:51:05 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi v1.10.3 is available - posted by Akira Ajisaka <aa...@apache.org> on 2026/01/02 14:39:41 UTC, 0 replies.
- Apache Commons Pool 2.13.1 - posted by Gary Gregory <gg...@apache.org> on 2026/01/02 20:13:43 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2025-12-30 are released - posted by Shahar Epstein <sh...@apache.org> on 2026/01/02 21:54:36 UTC, 0 replies.
- CVE-2025-66518: Apache Kyuubi: Unauthorized directory access due to missing path normalization - posted by Akira Ajisaka <aa...@apache.org> on 2026/01/05 05:03:54 UTC, 0 replies.
- [ANNOUNCE] Apache Fory 0.14.1 released - posted by Shawn Yang <ch...@apache.org> on 2026/01/05 07:39:18 UTC, 0 replies.
- CVE-2025-68280: Apache SIS: XML External Entity (XXE) vulnerability - posted by Martin Desruisseaux <de...@apache.org> on 2026/01/05 13:18:35 UTC, 0 replies.
- CVE-2025-52435: Apache NimBLE: Invalid error handling in pause encryption procedure in NimBLE controller - posted by Szymon Janc <ja...@apache.org> on 2026/01/08 09:50:31 UTC, 0 replies.
- CVE-2025-53470: Apache NimBLE: Out-of-Bounds Write Vulnerability in NimBLE HCI H4 driver - posted by Szymon Janc <ja...@apache.org> on 2026/01/08 09:53:43 UTC, 0 replies.
- CVE-2025-53477: Apache NimBLE: NULL Pointer Dereference in NimBLE host HCI layer - posted by Szymon Janc <ja...@apache.org> on 2026/01/08 09:54:02 UTC, 0 replies.
- CVE-2025-62235: Apache NimBLE: Incorrect handling of SMP Security Request could lead to undesirable pairing - posted by Szymon Janc <ja...@apache.org> on 2026/01/08 09:54:32 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.90.0 released - posted by Jörg Hoh <jo...@apache.org> on 2026/01/08 14:39:21 UTC, 0 replies.
- [ANNOUNCE] Apache Fineract 1.14.0 Release - posted by Adam Monsen <me...@apache.org> on 2026/01/08 19:33:16 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 1.3.6 released - posted by Haonan Hou <ha...@apache.org> on 2026/01/09 03:33:29 UTC, 0 replies.
- [ANNOUNCE] Apache Kudu 1.18.1 Released - posted by Abhishek Chennaka <ac...@apache.org> on 2026/01/10 02:19:00 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.14.4 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/01/10 15:29:46 UTC, 0 replies.
- S2-069: CVE-2025-68493: Apache Struts, Apache Struts: XXE vulnerability in outdated XWork component - posted by Lukasz Lenart <lu...@apache.org> on 2026/01/11 11:40:54 UTC, 0 replies.
- [ANN] Apache Tomcat Native 2.0.12 released - posted by Mark Thomas <ma...@apache.org> on 2026/01/12 12:02:48 UTC, 0 replies.
- [ANN] Apache Tomcat Native 1.3.4 released - posted by Mark Thomas <ma...@apache.org> on 2026/01/12 12:02:52 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.17.0 Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/01/12 13:39:30 UTC, 0 replies.
- [ANNOUNCE] Grails Publish Gradle Plugin 0.0.4 - posted by James Fredley <ja...@apache.org> on 2026/01/12 17:44:10 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.5 - posted by James Fredley <ja...@apache.org> on 2026/01/12 18:27:52 UTC, 0 replies.
- [ANNOUNCE] Apache Flink-shaded 21.0 released - posted by Martijn Visser <ma...@apache.org> on 2026/01/13 09:48:57 UTC, 0 replies.
- CVE-2025-66169: Apache Camel: Cypher injection vulnerability in Camel-Neo4j component - posted by Andrea Cosentino <ac...@apache.org> on 2026/01/13 12:53:11 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.6 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2026/01/13 13:27:47 UTC, 0 replies.
- [ANNOUNCE] Apache DataSketches Rust 0.2.0 Released - posted by tison <ti...@apache.org> on 2026/01/14 23:40:28 UTC, 0 replies.
- CVE-2025-68438: Apache Airflow: Secrets in rendered templates could contain parts of sensitive values when truncated - posted by Ephraim Anierobi <ep...@apache.org> on 2026/01/15 20:22:59 UTC, 0 replies.
- CVE-2025-68675: Apache Airflow: proxy credentials for various providers might leak in task logs - posted by Ephraim Anierobi <ep...@apache.org> on 2026/01/15 20:23:55 UTC, 0 replies.
- CVE-2025-60021: Apache bRPC: Remote command injection vulnerability in heap builtin service - posted by Guangming Chen <gu...@apache.org> on 2026/01/16 07:28:29 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid protonj2 1.1.0 released - posted by Timothy Bish <ta...@apache.org> on 2026/01/16 17:02:59 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit 2.22.3 released - posted by Julian Reschke <re...@apache.org> on 2026/01/16 17:06:42 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-01-13 are released - posted by Jens Scheffler <js...@apache.org> on 2026/01/17 12:23:02 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 2.0.6 released - posted by Haonan Hou <ha...@apache.org> on 2026/01/20 06:27:09 UTC, 0 replies.
- [ANNOUNCE] Apache OFBiz 24.09.05 released - posted by Nicolas Malin <nm...@apache.org> on 2026/01/20 09:25:52 UTC, 0 replies.
- CVE-2026-22022: Apache Solr: Unauthorized bypass of certain "predefined permission" rules in the RuleBasedAuthorizationPlugin - posted by Jason Gerlowski <ge...@apache.org> on 2026/01/20 15:50:52 UTC, 0 replies.
- CVE-2026-22444: Apache Solr: Insufficient file-access checking in standalone core-creation requests - posted by Jason Gerlowski <ge...@apache.org> on 2026/01/20 15:52:12 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 4.0.30 Released - posted by Paul King <pa...@apache.org> on 2026/01/21 20:54:49 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-01-17 are released - posted by Jens Scheffler <js...@apache.org> on 2026/01/21 21:16:36 UTC, 0 replies.
- [ANNOUNCE] Apache MINA SSHD 2.17.0 released - posted by Thomas Wolf <tw...@apache.org> on 2026/01/21 23:14:43 UTC, 0 replies.
- [ANNOUNCE] Apache Commons BCEL Version 6.12.0 - posted by Gary Gregory <gg...@apache.org> on 2026/01/22 14:00:28 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 1.16.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2026/01/23 15:27:12 UTC, 0 replies.
- [ANNOUNCE] Apache Qpid JMS 2.10.0 released - posted by Robbie Gemmell <ro...@apache.org> on 2026/01/23 15:29:46 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.115 available - posted by Rémy Maucherat <re...@apache.org> on 2026/01/23 15:55:18 UTC, 0 replies.
- [ANNOUNCE] Apache Artemis 2.50.0 Released - posted by Justin Bertram <jb...@apache.org> on 2026/01/23 17:55:24 UTC, 0 replies.
- CVE-2025-27821: HDFS native client: Out of bounds write in URI parser of native HDFS client - posted by Chris Nauroth <cn...@apache.org> on 2026/01/23 18:45:29 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi API 2.6.0 Released - posted by Pierre Villard <pv...@apache.org> on 2026/01/23 20:07:19 UTC, 0 replies.
- https://karaf.apache.org/security/cve-2026-24656.txt: CVE-2026-24656: Apache Karaf: Decanter log-socket collector has deserialization vulnerability - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/01/24 06:27:56 UTC, 0 replies.
- [ANNOUNCE] Apache bRPC 1.16.0 released - posted by Xiaofeng <xi...@apache.org> on 2026/01/25 08:45:49 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.6 - posted by James Daugherty <jd...@apache.org> on 2026/01/25 19:03:44 UTC, 0 replies.
- CVE-2016-15057: Apache Continuum: Command injection leading to RCE - posted by Arnout Engelen <en...@apache.org> on 2026/01/26 11:28:09 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.4 Released - posted by Paul King <pa...@apache.org> on 2026/01/27 08:40:51 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow 23.0.0 released - posted by Raúl Cumplido <ra...@apache.org> on 2026/01/27 09:49:26 UTC, 0 replies.
- [ANNOUNCE] Apache MINA SSHD 2.17.1 released - posted by Thomas Wolf <tw...@apache.org> on 2026/01/27 19:20:11 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.52 Available - posted by Christopher Schultz <sc...@apache.org> on 2026/01/27 23:22:15 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Client C++ 4.0.1 released - posted by Yunze Xu <xy...@apache.org> on 2026/01/29 02:36:05 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.18 Available - posted by Mark Thomas <ma...@apache.org> on 2026/01/30 10:00:35 UTC, 0 replies.
- [ANNOUNCE] Apache SIS 1.6 Release - posted by Martin Desruisseaux <de...@apache.org> on 2026/01/30 23:55:00 UTC, 1 replies.