You are viewing a plain text version of this content. The canonical link for it is here.
- [VOTE] Release Apache Kvrocks 2.16.0 - posted by Twice <tw...@gmail.com> on 2026/06/17 14:50:30 UTC, 6 replies.
- [RESULT][VOTE] Release Apache Kvrocks 2.16.0 - posted by Twice <tw...@apache.org> on 2026/06/21 15:47:51 UTC, 0 replies.
- CVE-2026-41566: Apache Kvrocks: Improper permission for the APPLYBATCH command - posted by Hulk Lin <hu...@apache.org> on 2026/06/25 02:19:05 UTC, 0 replies.
- CVE-2026-45188: Apache Kvrocks: Replication Fullsync Path Traversal via Unvalidated Filename Handling - posted by Hulk Lin <hu...@apache.org> on 2026/06/25 02:20:08 UTC, 0 replies.
- CVE-2026-46751: Apache Kvrocks: Does not remove the unsafe loadstring function from its Lua sandbox, allowing a user who can run EVAL scripts to load crafted, unvalidated bytecode that crashes the server process, resulting in a remote denial of service. - posted by Hulk Lin <hu...@apache.org> on 2026/06/25 02:21:08 UTC, 0 replies.
- CVE-2026-46752: Apache Kvrocks: Stack buffer overflow in Lua bit.tohex() - posted by Hulk Lin <hu...@apache.org> on 2026/06/25 02:22:26 UTC, 0 replies.
- CVE-2026-54226: Apache Kvrocks: RESTORE IntSet Integer Overflow Leads to Remote DoS - posted by Hulk Lin <hu...@apache.org> on 2026/06/25 02:23:26 UTC, 0 replies.