You are viewing a plain text version of this content. The canonical link for it is here.
- [jira] [Created] (KYLIN-6095) [SECURITY] Potential file access issue in Apache Kylin 5.0.2 - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:35:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6096) [SECURITY] Potential access-control issue in QuerySQLBlacklistController - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:39:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6097) [SECURITY] Potential cross-project access-control issue in JobController - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:40:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6098) [SECURITY] Potential cross-project access-control issue in JobMetadataDelegateController - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:41:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6099) [SECURITY] Potential access-control issue in SparkSourceController - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:42:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6100) [SECURITY] Potential unauthenticated metadata cleanup issue - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:42:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6101) [SECURITY] Potential SSRF issue in metadata backup handling - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:43:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6102) [SECURITY] Potential access-control issue in metadata export - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:43:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6103) [SECURITY] Potential access-control issue in project JDBC configuration - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:44:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6105) [SECURITY] Potential file deletion issue in metadata backup management - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:45:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6104) [SECURITY] Potential SSRF issue in job driver UI proxy - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:45:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6106) [SECURITY] Potential command execution issue in Spark job launch - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:46:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6107) [SECURITY] Potential unauthenticated broadcast processing issue - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:47:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6108) [SECURITY] Potential unauthenticated SQL execution issue in cache endpoints - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:47:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6109) [SECURITY] Potential authorization issue in table metadata API - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:48:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6111) [SECURITY] Potential JDBC configuration validation issue - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:49:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6110) [SECURITY] Potential unauthenticated metadata source replacement issue - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:49:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6112) [SECURITY] Potential resource exhaustion issue in computed column processing - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:50:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6113) [SECURITY] Potential authentication configuration issue in Kylin 5.0.4 production startup - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/01 14:51:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6114) Potential JDBC URL whitelist bypass in datasource configuration - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/02 15:29:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6115) Potential sensitive configuration exposure issue in Apache Kylin - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/02 15:39:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6116) Potential unsafe deserialization issue in cache handling - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/05 02:01:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6117) Potential path traversal and missing authorization issue in metadata backup broadcast - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/05 05:49:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6118) Potential unauthorized internal job-report RPC issue - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/05 09:38:00 UTC, 0 replies.
- [jira] [Created] (KYLIN-6119) Potential unauthorized maintenance operation issue - posted by "liyang (Jira)" <ji...@apache.org> on 2026/10/05 10:45:00 UTC, 0 replies.
- [VOTE] Release Apache Kylin 5.0.5, RC1 - posted by Li Yang <li...@apache.org> on 2026/10/12 08:19:39 UTC, 3 replies.
- [RESULT][VOTE] Release Apache Kylin 5.0.5, RC1 - posted by Li Yang <li...@apache.org> on 2026/10/15 10:22:53 UTC, 0 replies.
- [Announcement] Apache Kylin 5.0.5 released - posted by Li Yang <li...@apache.org> on 2026/10/15 10:28:44 UTC, 0 replies.
- CVE-2026-63618: Apache Kylin: Low-Privilege Config Exposure - posted by Li Yang <li...@apache.org> on 2026/10/16 02:24:10 UTC, 0 replies.
- CVE-2026-63619: Apache Kylin: Missing authorization and path-confinement on system meta dump - posted by Li Yang <li...@apache.org> on 2026/10/16 02:27:53 UTC, 0 replies.
- CVE-2026-64610: Apache Kylin: Redis unsafe Java deserialization - posted by Li Yang <li...@apache.org> on 2026/10/16 02:29:20 UTC, 0 replies.
- CVE-2026-64959: Apache Kylin: Missing authentication on certain cache API endpoints - posted by Li Yang <li...@apache.org> on 2026/10/16 02:33:15 UTC, 0 replies.
- CVE-2026-68571: Apache Kylin: JDBC URL Whitelist Verification Bypass - posted by Li Yang <li...@apache.org> on 2026/10/16 02:34:34 UTC, 0 replies.
- CVE-2026-68572: Apache Kylin: Unauthorized SQL execution to Spark SQL env - posted by Li Yang <li...@apache.org> on 2026/10/16 02:37:29 UTC, 0 replies.
- CVE-2026-68573: Apache Kylin: Unauthenticated Metastore Cleanup - posted by Li Yang <li...@apache.org> on 2026/10/16 02:39:59 UTC, 0 replies.
- CVE-2026-69076: Apache Kylin: Unauthorized cross-project job discard - posted by Li Yang <li...@apache.org> on 2026/10/16 02:42:38 UTC, 0 replies.
- CVE-2026-69077: Apache Kylin: JobController allows unauthorized cross-project manipulation - posted by Li Yang <li...@apache.org> on 2026/10/16 02:43:17 UTC, 0 replies.
- CVE-2026-69080: Apache Kylin: Broken Access Control in QuerySQLBlacklistController - posted by Li Yang <li...@apache.org> on 2026/10/16 02:45:32 UTC, 0 replies.
- CVE-2026-108709: Apache Kylin: Unauthenticated Metadata Broadcast (inside in-house network) - posted by Li Yang <li...@apache.org> on 2026/10/16 02:46:03 UTC, 0 replies.
- CVE-2026-108743: Apache Kylin: spark job OS command injection - posted by Li Yang <li...@apache.org> on 2026/10/16 03:00:12 UTC, 0 replies.
- CVE-2026-108762: Apache Kylin: delete metadata backup path-confinement bypass - posted by Li Yang <li...@apache.org> on 2026/10/16 03:00:58 UTC, 0 replies.
- CVE-2026-108764: Apache Kylin: job-driver UI proxy SSRF - posted by Li Yang <li...@apache.org> on 2026/10/16 03:03:11 UTC, 0 replies.
- CVE-2026-108766: Apache Kylin: missing JDBC-config authorization - posted by Li Yang <li...@apache.org> on 2026/10/16 03:03:55 UTC, 0 replies.
- CVE-2026-108771: Apache Kylin: unauthenticated broadcast API and polymorphic deserialization - posted by Li Yang <li...@apache.org> on 2026/10/16 03:05:10 UTC, 0 replies.
- CVE-2026-108776: Apache Kylin: tables/names SparkSQL injection - posted by Li Yang <li...@apache.org> on 2026/10/16 03:09:33 UTC, 0 replies.
- CVE-2026-108780: Apache Kylin: Potential JDBC source configuration validation issue - posted by Li Yang <li...@apache.org> on 2026/10/16 03:10:21 UTC, 0 replies.
- CVE-2026-108823: Apache Kylin: Potential unauthenticated job metadata replacement - posted by Li Yang <li...@apache.org> on 2026/10/16 03:10:54 UTC, 0 replies.
- CVE-2026-108833: Apache Kylin: default startup profile miss security settings - posted by Li Yang <li...@apache.org> on 2026/10/16 03:11:38 UTC, 0 replies.
- CVE-2026-108837: Apache Kylin: Potential computed-column resource exhaustion - posted by Li Yang <li...@apache.org> on 2026/10/16 03:12:18 UTC, 0 replies.