You are viewing a plain text version of this content. The canonical link for it is here.
- [ANNOUNCE] Apache ShardingSphere 5.5.3 available - posted by Longtao Jiang <ji...@apache.org> on 2026/03/01 07:55:02 UTC, 0 replies.
- [ANNOUNCE] Apache Ranger 2.8.0 released - posted by Madhan Neethiraj <ma...@apache.org> on 2026/03/02 07:29:05 UTC, 0 replies.
- [ANNOUNCE] Apache Fluss 0.9.0-incubating released - posted by yuxia luo <yu...@apache.org> on 2026/03/02 14:31:27 UTC, 0 replies.
- [ANNOUNCE] Apache Artemis 2.52.0 Released - posted by Justin Bertram <jb...@apache.org> on 2026/03/02 18:39:24 UTC, 0 replies.
- CVE-2025-59060: Apache Ranger: Hostname verification bypass in NiFiRegistryClient and NifiClient - posted by Velmurugan Periasamy <ve...@apache.org> on 2026/03/02 20:19:09 UTC, 0 replies.
- CVE-2025-59059: Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator - posted by Velmurugan Periasamy <ve...@apache.org> on 2026/03/02 20:21:12 UTC, 0 replies.
- Apache Airflow Providers prepared on 2026-02-26 are released - posted by Jarek Potiuk <po...@apache.org> on 2026/03/03 10:07:04 UTC, 0 replies.
- CVE-2026-27446: Apache Artemis, Apache ActiveMQ Artemis: Auth bypass for Core downstream federation - posted by Justin Bertram <jb...@apache.org> on 2026/03/03 17:21:23 UTC, 0 replies.
- CVE-2025-66168: Apache ActiveMQ, Apache ActiveMQ All Module, Apache ActiveMQ MQTT Module: MQTT control packet remaining length field is not properly validated - posted by "Christopher L. Shannon" <cs...@apache.org> on 2026/03/03 17:26:01 UTC, 0 replies.
- [ANNOUNCE] Apache Jackrabbit Oak 1.92.0 - posted by Julian Reschke <re...@apache.org> on 2026/03/03 18:42:36 UTC, 0 replies.
- [ANNOUNCE] Apache Solr 10.0.0 released - posted by Anshum Gupta <an...@apache.org> on 2026/03/04 18:13:44 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-03-03 are released - posted by Jarek Potiuk <po...@apache.org> on 2026/03/04 20:07:08 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 2.0.7 released - posted by Haonan Hou <ha...@apache.org> on 2026/03/05 08:03:45 UTC, 0 replies.
- [ANNOUNCE] Apache IoTDB 1.3.7 released - posted by Haonan Hou <ha...@apache.org> on 2026/03/05 08:04:59 UTC, 0 replies.
- [ANNOUNCE] Apache Accumulo ClassLoader Extras 1.0.0 - posted by Christopher <ct...@apache.org> on 2026/03/05 20:51:52 UTC, 0 replies.
- [ANNOUNCE] Apache Iceberg Go Release v0.5.0 - posted by Matt Topol <ze...@apache.org> on 2026/03/05 21:26:26 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.2.2 released - posted by David Jensen <dj...@apache.org> on 2026/03/06 08:11:25 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.4.2 GA released - posted by Oleg Kalnichevski <ol...@apache.org> on 2026/03/06 11:15:11 UTC, 0 replies.
- [ANN] Apache Maven 3.9.13 released - posted by Tamás Cservenák <cs...@apache.org> on 2026/03/06 12:40:15 UTC, 0 replies.
- [ANNOUNCE] Release Apache DolphinScheduler 3.4.1 - posted by wenjun <we...@apache.org> on 2026/03/06 14:30:26 UTC, 0 replies.
- CVE-2026-24281: Apache ZooKeeper: Reverse-DNS fallback enables hostname verification bypass in ZooKeeper ZKTrustManager - posted by Andor Molnar <an...@apache.org> on 2026/03/07 00:06:06 UTC, 0 replies.
- CVE-2026-24308: Apache ZooKeeper: Sensitive information disclosure in client configuration handling - posted by Andor Molnar <an...@apache.org> on 2026/03/07 00:06:10 UTC, 0 replies.
- [ANNOUNCE] Apache Storm 2.8.4 Released - posted by Rui Abreu <ra...@apache.org> on 2026/03/07 15:38:04 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Logging 1.3.6 - posted by Gary Gregory <gg...@apache.org> on 2026/03/08 13:22:14 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.8 - posted by James Fredley <ja...@apache.org> on 2026/03/08 17:23:34 UTC, 0 replies.
- CVE-2025-69219: Apache Airflow Providers Http: Unsafe Pickle Deserialization in apache-airflow-providers-http leading to RCE via HttpOperator - posted by Jarek Potiuk <po...@apache.org> on 2026/03/08 19:09:35 UTC, 0 replies.
- CVE-2025-55017: Apache IoTDB: Path Traversal Vulnerability - posted by Haonan Hou <ha...@apache.org> on 2026/03/09 02:47:27 UTC, 0 replies.
- CVE-2025-64152: Apache IoTDB: Path Traversal Vulnerability - posted by Haonan Hou <ha...@apache.org> on 2026/03/09 02:55:31 UTC, 0 replies.
- CVE-2026-24713: Apache IoTDB: JEXL Expression Injection Vulnerability - posted by Haonan Hou <ha...@apache.org> on 2026/03/09 03:55:30 UTC, 0 replies.
- CVE-2026-24015: Apache IoTDB: Insecure Default Configuration Vulnerability - posted by Haonan Hou <ha...@apache.org> on 2026/03/09 04:09:14 UTC, 0 replies.
- CVE-2026-25604: Apache Airflow AWS Auth Manager - Host Header Injection Leading to SAML Authentication Bypass - posted by Jarek Potiuk <po...@apache.org> on 2026/03/09 10:36:45 UTC, 0 replies.
- [ANN] Apache Sling 14 Released - posted by Stefan Seifert <ss...@apache.org> on 2026/03/09 15:32:45 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 3.0.7 released - posted by Andreas Lehmkühler <le...@apache.org> on 2026/03/09 21:22:55 UTC, 0 replies.
- CVE-2026-23907: Apache PDFBox Examples: Path Traversal in PDFBox ExtractEmbeddedFiles Example Code - posted by Tilman Hausherr <ti...@apache.org> on 2026/03/10 09:20:37 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Management 1.2.1 released - posted by PJ Fanning <fa...@apache.org> on 2026/03/10 10:09:25 UTC, 0 replies.
- [ANN] Apache Tomcat Native 1.3.7 released - posted by Mark Thomas <ma...@apache.org> on 2026/03/10 10:40:25 UTC, 0 replies.
- [ANN] Apache Tomcat Native 2.0.14 released - posted by Mark Thomas <ma...@apache.org> on 2026/03/10 10:40:31 UTC, 0 replies.
- [ANNOUNCE] Apache Gluten 1.6.0 released - posted by Hongze Zhang <ho...@apache.org> on 2026/03/10 13:00:11 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 3.1.8 Released - posted by Rahul Vats <ra...@apache.org> on 2026/03/11 21:22:13 UTC, 0 replies.
- [ANN] Apache Maven 3.9.14 released - posted by Tamás Cservenák <cs...@apache.org> on 2026/03/12 11:55:56 UTC, 0 replies.
- CVE-2025-60012: Apache Livy: Restrict file access - posted by György Gál <gg...@apache.org> on 2026/03/12 16:40:43 UTC, 0 replies.
- CVE-2025-66249: Apache Livy: Unauthorized directory access - posted by György Gál <gg...@apache.org> on 2026/03/12 16:41:49 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-03-09 are released - posted by Vincent Beck <vi...@apache.org> on 2026/03/13 19:45:23 UTC, 0 replies.
- CVE-2025-54920: Apache Spark: Spark History Server Code Execution Vulnerability - posted by Holden Karau <ho...@apache.org> on 2026/03/13 21:14:32 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow 2.11.2 Released - posted by Jarek Potiuk <po...@apache.org> on 2026/03/14 18:37:42 UTC, 0 replies.
- [ANNOUNCE] Apache PDFBox 2.0.36 released - posted by Andreas Lehmkühler <le...@apache.org> on 2026/03/15 18:26:37 UTC, 0 replies.
- [ANN] Apache Maven Daemon 1.0.4 released - posted by Tamás Cservenák <cs...@apache.org> on 2026/03/16 11:39:49 UTC, 0 replies.
- [ANNOUNCE] Apache Pekko Connectors 1.3.0 released - posted by PJ Fanning <fa...@apache.org> on 2026/03/16 13:37:12 UTC, 0 replies.
- [ANNOUNCE] Apache Grails 7.0.9 - posted by James Daugherty <jd...@apache.org> on 2026/03/17 00:16:09 UTC, 0 replies.
- [ANNOUNCE] Apache Seatunnel 2.3.13 released - posted by lidongdai <li...@apache.org> on 2026/03/17 03:12:24 UTC, 0 replies.
- CVE-2026-30911: Apache Airflow: Execution API HITL Endpoints Missing Per-Task Authorization - posted by Rahul Vats <ra...@apache.org> on 2026/03/17 06:21:43 UTC, 0 replies.
- CVE-2026-28779: Apache Airflow: Path of session token in cookie does not consider base_url - session hijacking via co-hosted applications - posted by Rahul Vats <ra...@apache.org> on 2026/03/17 06:24:00 UTC, 0 replies.
- CVE-2026-26929: Apache Airflow: Wildcard DagVersion Listing Bypasses Per‑DAG RBAC and Leaks Metadata - posted by Rahul Vats <ra...@apache.org> on 2026/03/17 06:25:12 UTC, 0 replies.
- CVE-2026-28563: Apache Airflow: DAG authorization bypass - posted by Rahul Vats <ra...@apache.org> on 2026/03/17 06:25:54 UTC, 0 replies.
- Fwd: [ANNOUNCE] Apache Arrow Java 19.0.0 released - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/03/17 06:40:22 UTC, 0 replies.
- [ANNOUNCE] Apache Kafka 4.1.2 - posted by Andrew Schofield <sc...@apache.org> on 2026/03/17 21:27:08 UTC, 0 replies.
- [ANNOUNCE] Apache Fory 0.16.0 released - posted by Shawn Yang <ch...@apache.org> on 2026/03/18 06:16:51 UTC, 0 replies.
- [ANNOUNCE] Apache Commons Net 3.13.0 - posted by Gary Gregory <gg...@apache.org> on 2026/03/18 23:13:38 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow CTl 0.1.3 from 0.1.3rc2 released - posted by Bugra Ozturk <bu...@apache.org> on 2026/03/19 10:36:15 UTC, 0 replies.
- [ANN] Apache Tomcat 11.0.20 Available - posted by Mark Thomas <ma...@apache.org> on 2026/03/20 12:17:39 UTC, 0 replies.
- [ANN] Apache Maven Daemon 1.0.5 released - posted by Tamás Cservenák <cs...@apache.org> on 2026/03/20 12:22:24 UTC, 0 replies.
- [ANN] Apache Tomcat 9.0.116 available - posted by Rémy Maucherat <re...@apache.org> on 2026/03/20 14:52:50 UTC, 0 replies.
- [ANNOUNCE] Apache Creadur RAT 0.18 - posted by "P. Ottlinger" <po...@apache.org> on 2026/03/20 15:07:04 UTC, 0 replies.
- CVE-2026-32642: Apache Artemis, Apache ActiveMQ Artemis: Temporary address auto-created for OpenWire consumer without createAddress permission - posted by Justin Bertram <jb...@apache.org> on 2026/03/20 18:44:28 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Helm Chart version 1.20.0 Released - posted by Jens Scheffler <js...@apache.org> on 2026/03/22 23:17:25 UTC, 0 replies.
- [ANN] Apache Tomcat 10.1.53 Available - posted by Christopher Schultz <sc...@apache.org> on 2026/03/23 20:13:21 UTC, 0 replies.
- [ANNOUNCE] Apache Tika 3.3.0 released - posted by Tim Allison <ta...@apache.org> on 2026/03/24 10:29:16 UTC, 0 replies.
- [ANNOUNCE] Apache ActiveMQ 5.19.3 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/03/24 14:04:29 UTC, 0 replies.
- [ANNOUNCE] Apache ActiveMQ 6.2.2 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/03/24 14:23:28 UTC, 0 replies.
- [ANNOUNCE] Apache Storm 2.8.5 Released - posted by Rui Abreu <ra...@apache.org> on 2026/03/25 00:13:20 UTC, 0 replies.
- [ANNOUNCE] Apache TsFile 2.2.1 released - posted by Haonan Hou <ha...@apache.org> on 2026/03/25 10:16:32 UTC, 0 replies.
- [ANNOUNCE] Apache SkyWalking MCP 0.1.0 Released - posted by xue fan <qi...@apache.org> on 2026/03/26 10:02:21 UTC, 0 replies.
- [ANNOUNCEMENT] HttpComponents Core 5.5-alpha1 released - posted by Oleg Kalnichevski <ol...@apache.org> on 2026/03/26 10:56:01 UTC, 0 replies.
- [ANNOUNCE] Apache Kyuubi v1.11.1 is available - posted by Cheng Pan <ch...@apache.org> on 2026/03/26 15:10:31 UTC, 0 replies.
- [ANNOUNCE] Apache Camel 4.18.1 (LTS) Released - posted by Gregor Zurowski <gz...@apache.org> on 2026/03/27 17:03:26 UTC, 0 replies.
- [ANNOUNCE] Apache Log4j `2.25.4` released - posted by "Piotr P. Karwasz" <pk...@apache.org> on 2026/03/28 11:19:42 UTC, 0 replies.
- [ANNOUNCE] Apache Airflow Providers prepared on 2026-03-24 are released - posted by Jens Scheffler <js...@apache.org> on 2026/03/28 12:46:41 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 4.0.31 Released - posted by Paul King <pa...@apache.org> on 2026/03/29 11:18:01 UTC, 0 replies.
- [ANNOUNCE] Apache Groovy 5.0.5 Released - posted by Paul King <pa...@apache.org> on 2026/03/29 11:43:41 UTC, 0 replies.
- [ANNOUNCE] Release Apache SkyWalking Client JS version 1.1.0 - posted by xue fan <qi...@apache.org> on 2026/03/30 14:01:28 UTC, 0 replies.
- CVE-2026-32794: Apache Airflow Provider for Databricks: TLS Certificate Verification Disabled in Databricks Provider K8s Token Exchange - posted by Jens Scheffler <js...@apache.org> on 2026/03/30 21:39:53 UTC, 0 replies.
- [ANNOUNCE] Apache ActiveMQ 6.2.3 has been released! - posted by Jean-Baptiste Onofré <jb...@apache.org> on 2026/03/31 03:21:06 UTC, 0 replies.
- Apache Beam 2.72.0 Released! - posted by Vitalii Terentev <vt...@apache.org> on 2026/03/31 09:06:24 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.2.0 released - posted by Lari Hotari <lh...@apache.org> on 2026/03/31 23:05:17 UTC, 0 replies.