You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [D] [DISCUSS] Long-term architecture for Lance support in Gravitino [gravitino] - posted by "MehulBatra (via GitHub)" <gi...@apache.org> on 2026/07/02 11:50:41 UTC, 0 replies.
- Re: [D] 2026 roadmap [gravitino] - posted by "Etherdaemon (via GitHub)" <gi...@apache.org> on 2026/07/06 23:04:39 UTC, 3 replies.
- [D] [DISCUSS] Iceberg V3 type support in Gravitino [gravitino] - posted by "nevzheng (via GitHub)" <gi...@apache.org> on 2026/07/08 00:53:44 UTC, 13 replies.
- [D] Support Iceberg V3 nanosecond timestamps (`timestamp_ns` / `timestamptz_ns`) [gravitino] - posted by "nevzheng (via GitHub)" <gi...@apache.org> on 2026/07/08 05:48:55 UTC, 0 replies.
- CVE-2026-41042: Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter - posted by Jerry Shao <js...@apache.org> on 2026/07/08 11:32:54 UTC, 0 replies.
- [D] When using Lance as the lakehouse format, does Fileset become redundant for unstructured data management? [gravitino] - posted by "honam-data (via GitHub)" <gi...@apache.org> on 2026/07/09 03:37:40 UTC, 2 replies.
- [D] Error taxonomy: we collapse every failure into HTTP 500 — a gateway shouldn't [gravitino] - posted by "nevzheng (via GitHub)" <gi...@apache.org> on 2026/07/10 23:44:27 UTC, 4 replies.
- [D] Client-side HTTPS / mTLS authentication as a foundation for RBAC & FGAC [gravitino] - posted by "nevzheng (via GitHub)" <gi...@apache.org> on 2026/07/12 17:34:44 UTC, 2 replies.
- [D] Proposal: Adopt OpenAPI as the External Contract for Gravitino API V2 [gravitino] - posted by "nevzheng (via GitHub)" <gi...@apache.org> on 2026/07/13 00:53:25 UTC, 4 replies.
- CVE-2026-41041: Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints. - posted by Jerry Shao <js...@apache.org> on 2026/07/13 02:08:15 UTC, 0 replies.
- CVE-2026-49876: Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs - posted by Yu Qi <yu...@apache.org> on 2026/07/13 02:17:45 UTC, 0 replies.
- [DISCUSS] Request GitHub Triage role for @nevzheng - posted by Nevin Zheng <ne...@datastrato.com> on 2026/07/15 15:45:55 UTC, 1 replies.
- Status Update: Gravitino and Starburst Enterprise Integration - posted by Hui Yu <hu...@datastrato.com> on 2026/07/16 02:47:24 UTC, 2 replies.
- [D] Plans for OPA support + row filters/column masking? [gravitino] - posted by "adwaithadwaith (via GitHub)" <gi...@apache.org> on 2026/07/16 06:16:26 UTC, 1 replies.
- [Tooling Request] Trying out Graphite Stacked PR + Review Tool - posted by Nevin Zheng <ne...@datastrato.com> on 2026/07/21 17:26:37 UTC, 1 replies.
- [D] [DISCUSS] Is a Paimon REST Catalog Server still necessary when Gravitino is used as the unified access layer? [gravitino] - posted by "TKilome (via GitHub)" <gi...@apache.org> on 2026/07/22 15:47:57 UTC, 2 replies.
- Request for Slack invitation to #gravitino channel - posted by jiangxt2 <ji...@vip.qq.com> on 2026/07/24 01:40:57 UTC, 3 replies.