You are viewing a plain text version of this content. The canonical link for it is here.
- Re: [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process - posted by PengHui Li <pe...@apache.org> on 2026/10/01 00:18:52 UTC, 2 replies.
- [RESULT] [VOTE] PIP-494: Scalable Topics Client Specification — authoritative reference and change process - posted by Matteo Merli <ma...@gmail.com> on 2026/10/01 15:32:32 UTC, 0 replies.
- [VOTE] Release Apache Pulsar 5.0.0 based on 5.0.0-candidate-1 - posted by Lari Hotari <lh...@apache.org> on 2026/10/01 20:33:23 UTC, 6 replies.
- [VOTE] Release Apache Pulsar 4.0.14 based on 4.0.14-candidate-1 - posted by Lari Hotari <lh...@apache.org> on 2026/10/01 22:40:37 UTC, 5 replies.
- [VOTE] Release Apache Pulsar 4.2.5 based on 4.2.5-candidate-1 - posted by Lari Hotari <lh...@apache.org> on 2026/10/01 22:57:08 UTC, 5 replies.
- Re: [VOTE] DotPulsar Release 5.3.4-rc.1 - posted by David Jensen <dj...@apache.org> on 2026/10/05 17:30:19 UTC, 1 replies.
- [ANNOUNCE] Apache Pulsar 4.2.5 released - posted by Lari Hotari <lh...@apache.org> on 2026/10/05 20:10:45 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 4.0.14 released - posted by Lari Hotari <lh...@apache.org> on 2026/10/05 20:11:33 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar 5.0.0 LTS released - posted by Lari Hotari <lh...@apache.org> on 2026/10/06 00:53:33 UTC, 0 replies.
- [VOTE] Release Apache Pulsar Helm Chart 4.8.0 based on 4.8.0-candidate-1; upgrade to Pulsar 5.0.0 as the default image - posted by Lari Hotari <lh...@apache.org> on 2026/10/06 19:55:47 UTC, 5 replies.
- [VOTE] PIP-246: Improved PROTOBUF_NATIVE schema compatibility checks without using avro-protobuf - posted by SiNan Liu <li...@gmail.com> on 2026/10/08 12:49:32 UTC, 2 replies.
- [RESULT][VOTE] Apache Pulsar DotPulsar 5.3.4 released - posted by David Jensen <dj...@apache.org> on 2026/10/09 07:26:23 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar C# Client DotPulsar 5.3.4 released - posted by David Jensen <dj...@apache.org> on 2026/10/09 07:31:57 UTC, 0 replies.
- [ANNOUNCE] Apache Pulsar Helm Chart version 4.8.0 Released - posted by Lari Hotari <lh...@apache.org> on 2026/10/13 12:04:13 UTC, 0 replies.
- [DISCUSS] Going through the backlog of open pull requests - posted by Matteo Merli <ma...@gmail.com> on 2026/10/14 16:53:10 UTC, 0 replies.
- Re: [DISCUSS] Backport topic-loading observability improvements to branch-4.0 and branch-4.2 - posted by Yubiao Feng <po...@gmail.com> on 2026/10/18 16:50:28 UTC, 1 replies.
- CVE-2026-105869: Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user role - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:46:48 UTC, 0 replies.
- CVE-2026-105926: Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:47:00 UTC, 0 replies.
- CVE-2026-105927: Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permission - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:47:13 UTC, 0 replies.
- CVE-2026-105930: Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Download - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:47:23 UTC, 0 replies.
- CVE-2026-105931: Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenants - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:47:33 UTC, 0 replies.
- CVE-2026-105932: Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpoints - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:47:44 UTC, 0 replies.
- CVE-2026-105933: Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initialization - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:47:52 UTC, 0 replies.
- CVE-2026-105934: Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topic - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:00 UTC, 0 replies.
- CVE-2026-105935: Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permission - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:09 UTC, 0 replies.
- CVE-2026-105936: Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpoint - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:18 UTC, 0 replies.
- CVE-2026-105937: Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic data - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:26 UTC, 0 replies.
- CVE-2026-105938: Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-all - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:35 UTC, 0 replies.
- CVE-2026-105942: Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalation - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:43 UTC, 0 replies.
- CVE-2026-105944: Apache Pulsar Manager: Missing authentication and authorization and disclosure of the Pulsar admin credential; end of life - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:51 UTC, 0 replies.
- CVE-2026-105945: Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storage - posted by Lari Hotari <lh...@apache.org> on 2026/10/21 17:48:59 UTC, 0 replies.
- [DISCUSS] PIP-497: Subscription-scoped internal statistics for persistent topics - posted by void-ptr974 via dev <de...@pulsar.apache.org> on 2026/10/22 14:52:49 UTC, 0 replies.
- [VOTE] Release Apache Pulsar 5.0.1 based on 5.0.1-candidate-1 - posted by Lari Hotari <la...@sagire.fi> on 2026/10/22 20:50:20 UTC, 2 replies.
- [VOTE] Release Apache Pulsar 5.0.1 based on 5.0.1-candidate-2 - posted by Lari Hotari <lh...@apache.org> on 2026/10/22 22:43:57 UTC, 1 replies.