You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache StormCrawler 3.5.1 released - posted by Richard Zowalla <rz...@apache.org> on 2026/02/01 08:20:28 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.7 - posted by James Fredley <ja...@apache.org> on 2026/02/01 14:32:34 UTC, 0 replies.
- [ANNOUNCE] Apache Teaclave™ TrustZone SDK 0.8.0 Released - posted by Zehui Chen <iv...@apache.org> on 2026/02/02 04:19:00 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.1.2 released - posted by David Jensen <dj...@apache.org> on 2026/02/02 09:44:52 UTC, 0 replies.
- [ANN] Apache Syncope 4.0.4 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/02/02 11:45:23 UTC, 0 replies.
- [ANN] Apache Syncope 3.0.16 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/02/02 11:47:25 UTC, 0 replies.
- CVE-2026-23794: Apache Syncope: Reflected XSS on Enduser Login - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/02/02 11:51:33 UTC, 0 replies.
- CVE-2026-23795: Apache Syncope: Console XXE on Keymaster parameters - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/02/02 11:51:45 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-01-27 are released - posted by Vincent Beck <vi...@apache.org> on 2026/02/02 16:31:13 UTC, 0 replies.
- [ANNOUNCE] Apache TomEE 10.1.4 - posted by Markus Jung <ju...@apache.org> on 2026/02/04 06:58:00 UTC, 0 replies.
- [ANNOUNCE] Apache YuniKorn v1.8.0 released - posted by Wilfred Spiegelenburg <wi...@apache.org> on 2026/02/04 09:22:16 UTC, 0 replies.
- CVE-2026-24735: Apache Answer: Revision API Improper Access Control leads to Information Disclosure - posted by Enxin Xie <li...@apache.org> on 2026/02/04 10:34:44 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.7 Released - posted by Ephraim Anierobi <ep...@apache.org> on 2026/02/04 12:22:16 UTC, 0 replies.
- [ANNOUNCE] Apache Daffodil 4.1.0 Released - posted by Steve Lawrence <sl...@apache.org> on 2026/02/05 15:13:37 UTC, 0 replies.
- [ANNOUNCE] Apache Flink Agents 0.2.0 released - posted by Xuannan Su <sx...@apache.org> on 2026/02/06 03:42:54 UTC, 0 replies.
- [ANNOUNCE] Apache APISIX 3.15.0 has been released - posted by Abhishek Choudhary <sh...@apache.org> on 2026/02/06 11:06:47 UTC, 0 replies.
- [ANNOUNCE] Apache Traffic Server 10.1.1 Release - posted by Chris McFarlen <cm...@apache.org> on 2026/02/06 16:42:59 UTC, 0 replies.
- [ANNOUNCE] Apache ShardingSphere ElasticJob-3.0.5 available - posted by Longtao Jiang <ji...@apache.org> on 2026/02/08 03:47:59 UTC, 0 replies.
- CVE-2026-23903: Apache Shiro: Auth bypass when accessing static files only on case-insensitive filesystems - posted by Lenny Primak <lp...@apache.org> on 2026/02/08 16:29:35 UTC, 0 replies.
- CVE-2026-23901: Apache Shiro: Brute force attack possible to determine valid user names - posted by Lenny Primak <lp...@apache.org> on 2026/02/08 16:30:14 UTC, 0 replies.
- CVE-2026-22922: Apache Airflow: Airflow externalLogUrl Permission Bypass - posted by Ephraim Anierobi <ep...@apache.org> on 2026/02/09 09:48:01 UTC, 0 replies.
- CVE-2026-24098: Apache Airflow: Assigning single DAG permission leaked all DAGs Import Errors - posted by Ephraim Anierobi <ep...@apache.org> on 2026/02/09 09:49:08 UTC, 0 replies.
- CVE-2026-24343: Apache HertzBeat: Uncontrolled Resource Consumption via Crafted XPath Expressions - posted by Qingran Zhao <zh...@apache.org> on 2026/02/09 14:21:32 UTC, 0 replies.
- [ANNOUNCE] Apache Druid 36.0.0 release - posted by Zoltan Haindrich <kg...@apache.org> on 2026/02/09 14:53:22 UTC, 0 replies.
- CVE-2026-23906: Apache Druid: Authentication Bypass via LDAP Anonymous Bind - posted by Karan Kumar <ka...@apache.org> on 2026/02/09 16:57:40 UTC, 0 replies.
- [ANNOUNCE] Apache Fory 0.15.0 released - posted by Shawn Yang <ch...@apache.org> on 2026/02/10 06:50:45 UTC, 0 replies.
- [ANN] Apache Struts IntelliJ IDEA plugin ver. 253.18970.1 - posted by Lukasz Lenart <lu...@apache.org> on 2026/02/11 07:31:01 UTC, 0 replies.
- [ANN] Apache Tomcat Native 2.0.13 released - posted by Mark Thomas <ma...@apache.org> on 2026/02/11 09:41:25 UTC, 0 replies.
- [ANNOUNCE] Apache Fesod (Incubating) 2.0.1-incubating released - posted by Shuxin Pan <ps...@apache.org> on 2026/02/11 10:12:00 UTC, 0 replies.
- [ANN] Apache Tomcat Native 1.3.6 released - posted by Mark Thomas <ma...@apache.org> on 2026/02/11 11:42:38 UTC, 0 replies.
- [ANN] Tomcat 9.0.x End of Support and Tomcat 9 long term support plan - posted by Mark Thomas <ma...@apache.org> on 2026/02/11 12:22:42 UTC, 0 replies.
- [ANN] End of support for Apache Tomcat Native 1.3.x - posted by Mark Thomas <ma...@apache.org> on 2026/02/11 12:22:47 UTC, 0 replies.
- [ANNOUNCE] Release Apache Hop 2.17.0 - posted by Bart Maertens <ba...@apache.org> on 2026/02/11 17:00:37 UTC, 0 replies.
- [ANNOUNCE] Apache Artemis 2.51.0 Released - posted by Domenico Francesco Bruscino <br...@apache.org> on 2026/02/11 17:37:08 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.4.1 GA released - posted by Oleg Kalnichevski <ol...@apache.org> on 2026/02/11 18:09:29 UTC, 0 replies.
- CVE-2025-33042: Apache Avro Java SDK: Code injection on Java generated code - posted by Ryan Skraba <rs...@apache.org> on 2026/02/12 18:03:27 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.10.9 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/02/12 20:26:04 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.14.5 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/02/13 08:31:47 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi 2.8.0 Released - posted by Pierre Villard <pv...@apache.org> on 2026/02/13 22:47:48 UTC, 0 replies.
- [ANNOUNCE] Apache ActiveMQ 5.19.2 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/02/14 06:05:01 UTC, 0 replies.
- [ANNOUNCE] Apache Karaf runtime 4.4.10 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/02/14 06:17:24 UTC, 0 replies.
- [ANNOUNCE] Apache Grails Quartz Plugin 4.0.1 - posted by James Daugherty <jd...@apache.org> on 2026/02/15 00:11:33 UTC, 0 replies.
- [ANNOUNCE] Apache Grails Redis Plugin 5.0.1 - posted by James Daugherty <jd...@apache.org> on 2026/02/15 00:12:24 UTC, 0 replies.
- [ANNOUNCE] Apache Grails Spring Security 7.0.1 - posted by Mattias Reichel <ma...@apache.org> on 2026/02/15 20:10:17 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 3.0.16 released - posted by Lari Hotari <lh...@apache.org> on 2026/02/16 09:42:42 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.2.0 released - posted by David Jensen <dj...@apache.org> on 2026/02/16 12:15:49 UTC, 0 replies.
- CVE-2026-25903: Apache NiFi: Missing Authorization of Restricted Permissions for Component Updates - posted by David Handermann <ex...@apache.org> on 2026/02/16 17:00:02 UTC, 0 replies.
- CVE-2026-25087: Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering - posted by Antoine Pitrou <ap...@apache.org> on 2026/02/17 10:48:28 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow 23.0.1 released - posted by Raúl Cumplido <ra...@apache.org> on 2026/02/17 11:58:34 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 4.2.0 - posted by Christo Lolov <cl...@apache.org> on 2026/02/17 14:48:25 UTC, 0 replies.
- [ANNOUNCE] Apache Commons FileUpload 2.0.0-M5 - posted by Gary Gregory <gg...@apache.org> on 2026/02/17 16:06:00 UTC, 0 replies.
- [SECURITY] CVE-2025-66614 Apache Tomcat - Client certificate verification bypass due to virtual host mapping - posted by Mark Thomas <ma...@apache.org> on 2026/02/17 18:19:41 UTC, 0 replies.
- [SECURITY] CVE-2026-24733 Apache Tomcat - Security constraint bypass with HTTP/0.9 - posted by Mark Thomas <ma...@apache.org> on 2026/02/17 18:20:30 UTC, 0 replies.
- [SECURITY] CVE-2026-24734 Apache Tomcat and Tomcat Native - OCSP revocation bypass - posted by Mark Thomas <ma...@apache.org> on 2026/02/17 18:21:16 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.18.0 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/02/17 19:43:21 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Helm Chart version 1.19.0 Released - posted by Jedidiah Cunningham <je...@apache.org> on 2026/02/17 22:12:30 UTC, 0 replies.
- [ANNOUNCE] Apache ActiveMQ 6.2.1 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/02/18 06:57:24 UTC, 0 replies.
- https://camel.apache.org/security/CVE-2026-25747.html: CVE-2026-25747: Apache Camel: Deserialization of Untrusted Data in Camel LevelDB - posted by Andrea Cosentino <ac...@apache.org> on 2026/02/18 10:27:33 UTC, 0 replies.
- https://camel.apache.org/security/CVE-2026-23552.html: CVE-2026-23552: Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy - posted by Andrea Cosentino <ac...@apache.org> on 2026/02/18 10:28:58 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.0.9 released - posted by Lari Hotari <lh...@apache.org> on 2026/02/19 20:14:55 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.1.3 released - posted by Lari Hotari <lh...@apache.org> on 2026/02/19 20:15:42 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.11.1 and Fab provider 1.5.4 Released - posted by Jarek Potiuk <po...@apache.org> on 2026/02/21 01:32:10 UTC, 0 replies.
- [ANN] Apache Syncope 4.1.0-M0 - posted by Francesco Chicchiriccò <il...@apache.org> on 2026/02/23 06:40:56 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Helm Chart version 4.5.0 Released - posted by Lari Hotari <lh...@apache.org> on 2026/02/23 09:53:59 UTC, 0 replies.
- CVE-2025-27555: Apache Airflow: Connection Secrets not masked in UI when Connection are added via Airflow cli - posted by Jarek Potiuk <po...@apache.org> on 2026/02/23 15:47:04 UTC, 0 replies.
- CVE-2024-56373: Apache Airflow: SSTI to Code Execution in Airflow through Shared DB Information - posted by Jarek Potiuk <po...@apache.org> on 2026/02/23 23:28:28 UTC, 0 replies.
- CVE-2026-23969: Apache Superset: Exposure of Sensitive Information via Incomplete ClickHouse Function Filtering - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:23:01 UTC, 0 replies.
- CVE-2026-23980: Apache Superset: Improper Neutralization of Special Elements used in a SQL Command - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:26:05 UTC, 0 replies.
- CVE-2026-23982: Apache Superset: Improper Authorization in Dataset Creation Allows Access Control Bypass - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:35:43 UTC, 0 replies.
- CVE-2026-23983: Apache Superset: Sensitive Data Exposure via REST API (disabled by default) - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:42:35 UTC, 0 replies.
- CVE-2026-23984: Apache Superset: SQLLab Read-Only Bypass on PostgreSQL - posted by Daniel Gaspar <dp...@apache.org> on 2026/02/24 09:45:40 UTC, 0 replies.
- [ANNOUNCE] Apache NetBeans 29 Released - posted by Eric Barboni <sk...@apache.org> on 2026/02/24 10:58:13 UTC, 0 replies.
- [ANNOUNCE] OpenNLP 3.0.0-M1 released - posted by Richard Zowalla <rz...@apache.org> on 2026/02/24 19:41:44 UTC, 0 replies.
- [ANNOUNCE] Apache Arrow nanoarrow 0.8.0 Released - posted by Dewey Dunnington <pa...@apache.org> on 2026/02/25 04:25:50 UTC, 0 replies.
- [ANNOUNCE] Apache Wayang 1.1.1 released - posted by Mads Sejer <se...@apache.org> on 2026/02/25 17:03:56 UTC, 0 replies.
- [ANNOUNCE] Apache NiFi NAR Maven Plugin 2.3.0 Released - posted by Pierre Villard <pv...@apache.org> on 2026/02/27 09:03:00 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.2.1 released - posted by David Jensen <dj...@apache.org> on 2026/02/27 09:17:22 UTC, 0 replies.
- [ANNOUNCE] Release Apache Kvrocks 2.15.0 - posted by hulk <hu...@apache.org> on 2026/02/28 14:07:15 UTC, 0 replies.