You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@security.apache.org by pk...@apache.org on 2026/08/10 17:10:18 UTC
(security-site) 03/03: CVE updates from 2026-08-03 through 2026-08-10
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch cve-updates-2026-08-10
in repository https://gitbox.apache.org/repos/asf/security-site.git
commit 4e2087bc257b3085ed369a887842728745c2bae4
Author: Piotr P. Karwasz <pi...@github.copernik.eu>
AuthorDate: Mon Aug 10 19:07:49 2026 +0200
CVE updates from 2026-08-03 through 2026-08-10
Regenerates the project pages with CVEs disclosed between 2026-08-03 and
2026-08-10: 72 new advisories across 12 projects (CVE and OSV JSON files
plus regenerated project pages).
New advisories: qpid (24), cxf (12), ranger (10), answer (6), apr (5),
nifi (4), lucy (4), fory (3), jena (1), polaris (1), iotdb (1),
tapestry (1). Lucy and Qpid get their first advisory pages.
Ranger CVE-2026-32227 has no OSV file: cve2osv.py does not yet support
explicitly 'unaffected' version ranges, as with the 45 advisories already
in that situation.
Assisted-By: Claude Opus 5 (1M context) <no...@anthropic.com>
---
content/projects/_index.md | 139 +++++-
content/projects/answer/_index.md | 154 +++++++
content/projects/apr/_index.md | 128 +++++-
content/projects/cxf/_index.md | 318 +++++++++++++-
content/projects/fineract/_index.md | 2 +-
content/projects/fluss/_index.md | 7 +-
content/projects/fory/_index.md | 77 ++++
content/projects/iotdb/_index.md | 22 +
content/projects/jena/_index.md | 21 +
content/projects/lucy/_index.md | 97 +++++
content/projects/nifi/_index.md | 100 +++++
content/projects/polaris/_index.md | 25 ++
content/projects/qpid/_index.md | 522 +++++++++++++++++++++++
content/projects/ranger/_index.md | 248 +++++++++++
content/projects/seata/_index.md | 8 +-
content/projects/tapestry/_index.md | 25 ++
content/projects/zeppelin/_index.md | 2 +-
static/projects/answer/CVE-2026-48834.cve.json | 89 ++++
static/projects/answer/CVE-2026-48834.osv.json | 1 +
static/projects/answer/CVE-2026-48911.cve.json | 94 ++++
static/projects/answer/CVE-2026-48911.osv.json | 1 +
static/projects/answer/CVE-2026-48912.cve.json | 89 ++++
static/projects/answer/CVE-2026-48912.osv.json | 1 +
static/projects/answer/CVE-2026-50749.cve.json | 104 +++++
static/projects/answer/CVE-2026-50749.osv.json | 1 +
static/projects/answer/CVE-2026-60023.cve.json | 89 ++++
static/projects/answer/CVE-2026-60023.osv.json | 1 +
static/projects/answer/CVE-2026-60053.cve.json | 89 ++++
static/projects/answer/CVE-2026-60053.osv.json | 1 +
static/projects/apr/CVE-2025-49506.cve.json | 107 +++++
static/projects/apr/CVE-2025-49506.osv.json | 1 +
static/projects/apr/CVE-2026-32327.cve.json | 112 +++++
static/projects/apr/CVE-2026-32327.osv.json | 1 +
static/projects/apr/CVE-2026-34191.cve.json | 106 +++++
static/projects/apr/CVE-2026-34191.osv.json | 1 +
static/projects/apr/CVE-2026-34501.cve.json | 101 +++++
static/projects/apr/CVE-2026-34501.osv.json | 1 +
static/projects/apr/CVE-2026-34502.cve.json | 106 +++++
static/projects/apr/CVE-2026-34502.osv.json | 1 +
static/projects/cxf/CVE-2026-54225.cve.json | 96 +++++
static/projects/cxf/CVE-2026-54225.osv.json | 1 +
static/projects/cxf/CVE-2026-57817.cve.json | 103 +++++
static/projects/cxf/CVE-2026-57817.osv.json | 1 +
static/projects/cxf/CVE-2026-57818.cve.json | 103 +++++
static/projects/cxf/CVE-2026-57818.osv.json | 1 +
static/projects/cxf/CVE-2026-57819.cve.json | 96 +++++
static/projects/cxf/CVE-2026-57819.osv.json | 1 +
static/projects/cxf/CVE-2026-61466.cve.json | 103 +++++
static/projects/cxf/CVE-2026-61466.osv.json | 1 +
static/projects/cxf/CVE-2026-63687.cve.json | 103 +++++
static/projects/cxf/CVE-2026-63687.osv.json | 1 +
static/projects/cxf/CVE-2026-64958.cve.json | 103 +++++
static/projects/cxf/CVE-2026-64958.osv.json | 1 +
static/projects/cxf/CVE-2026-65432.cve.json | 103 +++++
static/projects/cxf/CVE-2026-65432.osv.json | 1 +
static/projects/cxf/CVE-2026-65583.cve.json | 103 +++++
static/projects/cxf/CVE-2026-65583.osv.json | 1 +
static/projects/cxf/CVE-2026-66909.cve.json | 103 +++++
static/projects/cxf/CVE-2026-66909.osv.json | 1 +
static/projects/cxf/CVE-2026-68079.cve.json | 103 +++++
static/projects/cxf/CVE-2026-68079.osv.json | 1 +
static/projects/cxf/CVE-2026-68481.cve.json | 103 +++++
static/projects/cxf/CVE-2026-68481.osv.json | 1 +
static/projects/fory/CVE-2026-71558.cve.json | 89 ++++
static/projects/fory/CVE-2026-71558.osv.json | 1 +
static/projects/fory/CVE-2026-71559.cve.json | 89 ++++
static/projects/fory/CVE-2026-71559.osv.json | 1 +
static/projects/fory/CVE-2026-71560.cve.json | 89 ++++
static/projects/fory/CVE-2026-71560.osv.json | 1 +
static/projects/iotdb/CVE-2026-44630.cve.json | 98 +++++
static/projects/iotdb/CVE-2026-44630.osv.json | 1 +
static/projects/jena/CVE-2026-61372.cve.json | 82 ++++
static/projects/jena/CVE-2026-61372.osv.json | 1 +
static/projects/lucy/CVE-2026-61483.cve.json | 88 ++++
static/projects/lucy/CVE-2026-61483.osv.json | 1 +
static/projects/lucy/CVE-2026-61484.cve.json | 88 ++++
static/projects/lucy/CVE-2026-61484.osv.json | 1 +
static/projects/lucy/CVE-2026-61485.cve.json | 88 ++++
static/projects/lucy/CVE-2026-61485.osv.json | 1 +
static/projects/lucy/CVE-2026-61486.cve.json | 88 ++++
static/projects/lucy/CVE-2026-61486.osv.json | 1 +
static/projects/nifi/CVE-2026-62354.cve.json | 132 ++++++
static/projects/nifi/CVE-2026-62354.osv.json | 1 +
static/projects/nifi/CVE-2026-68979.cve.json | 131 ++++++
static/projects/nifi/CVE-2026-68979.osv.json | 1 +
static/projects/nifi/CVE-2026-68980.cve.json | 132 ++++++
static/projects/nifi/CVE-2026-68980.osv.json | 1 +
static/projects/nifi/CVE-2026-68981.cve.json | 132 ++++++
static/projects/nifi/CVE-2026-68981.osv.json | 1 +
static/projects/polaris/CVE-2026-64640.cve.json | 122 ++++++
static/projects/polaris/CVE-2026-64640.osv.json | 1 +
static/projects/qpid/CVE-2026-66257.cve.json | 84 ++++
static/projects/qpid/CVE-2026-66257.osv.json | 1 +
static/projects/qpid/CVE-2026-66273.cve.json | 84 ++++
static/projects/qpid/CVE-2026-66273.osv.json | 1 +
static/projects/qpid/CVE-2026-66274.cve.json | 84 ++++
static/projects/qpid/CVE-2026-66274.osv.json | 1 +
static/projects/qpid/CVE-2026-66275.cve.json | 84 ++++
static/projects/qpid/CVE-2026-66275.osv.json | 1 +
static/projects/qpid/CVE-2026-66276.cve.json | 84 ++++
static/projects/qpid/CVE-2026-66276.osv.json | 1 +
static/projects/qpid/CVE-2026-66277.cve.json | 84 ++++
static/projects/qpid/CVE-2026-66277.osv.json | 1 +
static/projects/qpid/CVE-2026-67465.cve.json | 83 ++++
static/projects/qpid/CVE-2026-67465.osv.json | 1 +
static/projects/qpid/CVE-2026-67551.cve.json | 83 ++++
static/projects/qpid/CVE-2026-67551.osv.json | 1 +
static/projects/qpid/CVE-2026-67552.cve.json | 83 ++++
static/projects/qpid/CVE-2026-67552.osv.json | 1 +
static/projects/qpid/CVE-2026-67553.cve.json | 83 ++++
static/projects/qpid/CVE-2026-67553.osv.json | 1 +
static/projects/qpid/CVE-2026-67554.cve.json | 83 ++++
static/projects/qpid/CVE-2026-67554.osv.json | 1 +
static/projects/qpid/CVE-2026-67555.cve.json | 83 ++++
static/projects/qpid/CVE-2026-67555.osv.json | 1 +
static/projects/qpid/CVE-2026-67588.cve.json | 84 ++++
static/projects/qpid/CVE-2026-67588.osv.json | 1 +
static/projects/qpid/CVE-2026-67589.cve.json | 96 +++++
static/projects/qpid/CVE-2026-67589.osv.json | 1 +
static/projects/qpid/CVE-2026-67590.cve.json | 84 ++++
static/projects/qpid/CVE-2026-67590.osv.json | 1 +
static/projects/qpid/CVE-2026-67591.cve.json | 84 ++++
static/projects/qpid/CVE-2026-67591.osv.json | 1 +
static/projects/qpid/CVE-2026-67592.cve.json | 84 ++++
static/projects/qpid/CVE-2026-67592.osv.json | 1 +
static/projects/qpid/CVE-2026-68060.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68060.osv.json | 1 +
static/projects/qpid/CVE-2026-68073.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68073.osv.json | 1 +
static/projects/qpid/CVE-2026-68074.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68074.osv.json | 1 +
static/projects/qpid/CVE-2026-68075.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68075.osv.json | 1 +
static/projects/qpid/CVE-2026-68077.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68077.osv.json | 1 +
static/projects/qpid/CVE-2026-68078.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68078.osv.json | 1 +
static/projects/qpid/CVE-2026-68080.cve.json | 84 ++++
static/projects/qpid/CVE-2026-68080.osv.json | 1 +
static/projects/ranger/CVE-2026-28672.cve.json | 90 ++++
static/projects/ranger/CVE-2026-28672.osv.json | 1 +
static/projects/ranger/CVE-2026-32227.cve.json | 91 ++++
static/projects/ranger/CVE-2026-40920.cve.json | 109 +++++
static/projects/ranger/CVE-2026-40920.osv.json | 1 +
static/projects/ranger/CVE-2026-42537.cve.json | 99 +++++
static/projects/ranger/CVE-2026-42537.osv.json | 1 +
static/projects/ranger/CVE-2026-44416.cve.json | 99 +++++
static/projects/ranger/CVE-2026-44416.osv.json | 1 +
static/projects/ranger/CVE-2026-55799.cve.json | 89 ++++
static/projects/ranger/CVE-2026-55799.osv.json | 1 +
static/projects/ranger/CVE-2026-55814.cve.json | 89 ++++
static/projects/ranger/CVE-2026-55814.osv.json | 1 +
static/projects/ranger/CVE-2026-65942.cve.json | 89 ++++
static/projects/ranger/CVE-2026-65942.osv.json | 1 +
static/projects/ranger/CVE-2026-65945.cve.json | 89 ++++
static/projects/ranger/CVE-2026-65945.osv.json | 1 +
static/projects/ranger/CVE-2026-65948.cve.json | 89 ++++
static/projects/ranger/CVE-2026-65948.osv.json | 1 +
static/projects/tapestry/CVE-2026-61899.cve.json | 91 ++++
static/projects/tapestry/CVE-2026-61899.osv.json | 1 +
160 files changed, 8747 insertions(+), 21 deletions(-)
diff --git a/content/projects/_index.md b/content/projects/_index.md
index 01c379a4..706c5220 100644
--- a/content/projects/_index.md
+++ b/content/projects/_index.md
@@ -83,6 +83,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@ambari.apache.org](mailto:security@ambari.apache.org?subject=Ambari)
- Advisories (experimental):\
[security.apache.org](/projects/ambari/)
+- <img class="project-logo" src="https://www.apache.org/logos/res/amoro/default.png" alt="" loading="lazy"> **Apache Amoro (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Amoro%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/answer/default.png" alt="" loading="lazy"> **Apache Answer**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Answer)
@@ -133,6 +138,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=Atlas)
- Advisories (experimental):\
[security.apache.org](/projects/atlas/)
+- <img class="project-logo" src="https://www.apache.org/logos/res/auron/default.png" alt="" loading="lazy"> **Apache Auron (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Auron%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/avro/default.png" alt="" loading="lazy"> **Apache Avro**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Avro)
@@ -160,13 +170,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=Beam)
- Advisories (experimental):\
none so far
-- **Apache BifroMQ**
+- **Apache BifroMQ (Incubating)**
- **Security contact:**\
- [security@apache.org](mailto:security@apache.org?subject=BifroMQ)
+ [security@apache.org](mailto:security@apache.org?subject=BifroMQ%20%28Incubating%29)
- Advisories (experimental):\
none so far
- Security model:
- - [Apache BifroMQ security model](https://bifromq.apache.org/docs/admin_guide/security/intro/)
+ - [Apache BifroMQ (Incubating) security model](https://bifromq.apache.org/docs/admin_guide/security/intro/)
- <img class="project-logo" src="https://www.apache.org/logos/res/bigtop/default.png" alt="" loading="lazy"> **Apache Bigtop**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Bigtop)
@@ -194,6 +204,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=BuildStream)
- Advisories (experimental):\
none so far
+- **Apache Burr (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Burr%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/bval/default.png" alt="" loading="lazy"> **Apache BVal**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=BVal)
@@ -212,6 +227,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security.apache.org](/projects/calcite/)
- Security model:
- [Apache Calcite security model](https://calcite.apache.org/docs/security_threat_model.html)
+- **Apache Caldera (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Caldera%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/camel/default.png" alt="" loading="lazy"> **Apache Camel**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Camel)
@@ -226,6 +246,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
none so far
- Security model:
- [Apache Carbondata security model](https://carbondata.apache.org/security.html)
+- <img class="project-logo" src="https://www.apache.org/logos/res/casbin/default.png" alt="" loading="lazy"> **Apache Casbin (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Casbin%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/cassandra/default.png" alt="" loading="lazy"> **Apache Cassandra**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Cassandra)
@@ -253,6 +278,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=Celix)
- Advisories (experimental):\
none so far
+- <img class="project-logo" src="https://www.apache.org/logos/res/cloudberry/default.png" alt="" loading="lazy"> **Apache Cloudberry (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Cloudberry%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
+ - Security model:
+ - [Apache Cloudberry (Incubating) security model](https://cloudberry.apache.org/community/security)
- <img class="project-logo" src="https://www.apache.org/logos/res/cloudstack/default.png" alt="" loading="lazy"> **Apache CloudStack**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=CloudStack)
@@ -425,7 +457,7 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=Felix)
- Advisories (experimental):\
[security.apache.org](/projects/felix/)
-- **Apache Fesod (Incubating)**
+- <img class="project-logo" src="https://www.apache.org/logos/res/fesod/default.png" alt="" loading="lazy"> **Apache Fesod (Incubating)**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Fesod%20%28Incubating%29)
- Advisories (experimental):\
@@ -454,11 +486,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[flink.apache.org](https://flink.apache.org/what-is-flink/security/)
- Security model:
- [Apache Flink security model](https://flink.apache.org/what-is-flink/security/)
-- **Apache Fluss**
+- <img class="project-logo" src="https://www.apache.org/logos/res/fluss/default.png" alt="" loading="lazy"> **Apache Fluss**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Fluss)
- - Advisories (experimental):\
- [security.apache.org](/projects/fluss/)
+ - Advisories:\
+ [fluss.apache.org](https://fluss.apache.org/community/security/)
+ - Security model:
+ - [Apache Fluss security model](https://fluss.apache.org/docs/security/overview/)
- **Apache Fory**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Fory)
@@ -480,6 +514,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
## G {.panel-letter}
+- **Apache GeaFlow (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=GeaFlow%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/geode/default.png" alt="" loading="lazy"> **Apache Geode**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Geode)
@@ -512,6 +551,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
- Security models:
- [Apache Grails security model](https://github.com/apache/grails-core/blob/8.0.x/THREAT_MODEL.md)
- [Apache Grails Spring Security security model](https://github.com/apache/grails-spring-security/blob/8.0.x/THREAT_MODEL.md)
+- <img class="project-logo" src="https://www.apache.org/logos/res/graphar/default.png" alt="" loading="lazy"> **Apache GraphAr (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=GraphAr%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/gravitino/default.png" alt="" loading="lazy"> **Apache Gravitino**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Gravitino)
@@ -549,6 +593,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[hadoop.apache.org](https://hadoop.apache.org/cve_list.html)
- Security model:
- [Apache Hadoop security model](https://github.com/apache/hadoop/security/policy)
+- **Apache Hamilton (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Hamilton%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
+ - Security model:
+ - [Apache Hamilton (Incubating) security model](https://github.com/apache/hamilton/blob/main/SECURITY.md)
- <img class="project-logo" src="https://www.apache.org/logos/res/hbase/default.png" alt="" loading="lazy"> **Apache HBase**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=HBase)
@@ -625,6 +676,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
none so far
- Security model:
- [Apache Iceberg security model](https://github.com/apache/iceberg/blob/main/SECURITY-THREAT-MODEL.md)
+- <img class="project-logo" src="https://www.apache.org/logos/res/iggy/default.png" alt="" loading="lazy"> **Apache Iggy (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Iggy%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
+ - Security model:
+ - [Apache Iggy (Incubating) security model](https://github.com/apache/iggy/blob/master/SECURITY.md)
- <img class="project-logo" src="https://www.apache.org/logos/res/ignite/default.png" alt="" loading="lazy"> **Apache Ignite**
- **Security contact:**\
[security@ignite.apache.org](mailto:security@ignite.apache.org?subject=Ignite)
@@ -724,6 +782,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=Karaf)
- Advisories (experimental):\
[security.apache.org](/projects/karaf/)
+- **Apache KIE (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=KIE%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/knox/default.png" alt="" loading="lazy"> **Apache Knox**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Knox)
@@ -926,6 +989,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[www.openoffice.org](https://www.openoffice.org/security/bulletin.html)
- Security model:
- [Apache OpenOffice security model](https://openoffice.apache.org/security)
+- <img class="project-logo" src="https://www.apache.org/logos/res/openserverless/default.png" alt="" loading="lazy"> **Apache OpenServerless (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=OpenServerless%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/openwebbeans/default.png" alt="" loading="lazy"> **Apache OpenWebBeans**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=OpenWebBeans)
@@ -943,6 +1011,21 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[orc.apache.org](https://orc.apache.org/security/)
- Security model:
- [Apache ORC security model](https://orc.apache.org/security/)
+- **Apache Ossie (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Ossie%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
+- **Apache Otava (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Otava%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
+- <img class="project-logo" src="https://www.apache.org/logos/res/ozhera/default.png" alt="" loading="lazy"> **Apache OzHera (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=OzHera%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/ozone/default.png" alt="" loading="lazy"> **Apache Ozone**
- **Security contact:**\
[security@ozone.apache.org](mailto:security@ozone.apache.org?subject=Ozone)
@@ -977,6 +1060,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security.apache.org](/projects/pdfbox/)
- Security model:
- [Apache PDFBox security model](https://github.com/apache/pdfbox/security/policy)
+- <img class="project-logo" src="https://www.apache.org/logos/res/pegasus/default.png" alt="" loading="lazy"> **Apache Pegasus (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Pegasus%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/pekko/default.png" alt="" loading="lazy"> **Apache Pekko**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Pekko)
@@ -1021,7 +1109,7 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
- Security models:
- [Apache Polaris security model](https://github.com/apache/polaris/blob/main/SECURITY-THREAT-MODEL.md)
- [Apache Polaris Tools security model](https://github.com/apache/polaris-tools/blob/main/SECURITY-THREAT-MODEL.md)
-- **Apache Pony Mail**
+- <img class="project-logo" src="https://www.apache.org/logos/res/ponymail/default.png" alt="" loading="lazy"> **Apache Pony Mail**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Pony%20Mail)
- Advisories (experimental):\
@@ -1033,6 +1121,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security.apache.org](/projects/apr/)
- Security model:
- [Apache Portable Runtime (APR) security model](https://apr.apache.org/security_report.html)
+- **Apache PouchDB (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=PouchDB%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/pulsar/default.png" alt="" loading="lazy"> **Apache Pulsar**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Pulsar)
@@ -1050,7 +1143,7 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Qpid)
- Advisories (experimental):\
- none so far
+ [security.apache.org](/projects/qpid/)
</section>
<section class="project-tab-panel" role="tabpanel" data-letter="R">
@@ -1069,6 +1162,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=Ratis)
- Advisories (experimental):\
none so far
+- <img class="project-logo" src="https://www.apache.org/logos/res/resilientdb/default.png" alt="" loading="lazy"> **Apache ResilientDB (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=ResilientDB%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/rocketmq/default.png" alt="" loading="lazy"> **Apache RocketMQ**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=RocketMQ)
@@ -1114,13 +1212,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=SDAP)
- Advisories (experimental):\
none so far
-- <img class="project-logo" src="https://www.apache.org/logos/res/seata/default.png" alt="" loading="lazy"> **Apache Seata**
+- <img class="project-logo" src="https://www.apache.org/logos/res/seata/default.png" alt="" loading="lazy"> **Apache Seata (Incubating)**
- **Security contact:**\
- [security@apache.org](mailto:security@apache.org?subject=Seata)
+ [security@apache.org](mailto:security@apache.org?subject=Seata%20%28Incubating%29)
- Advisories (experimental):\
[security.apache.org](/projects/seata/)
- Security model:
- - [Apache Seata security model](https://seata.apache.org/docs/next/security/secret-key)
+ - [Apache Seata (Incubating) security model](https://seata.apache.org/docs/next/security/secret-key)
- <img class="project-logo" src="https://www.apache.org/logos/res/seatunnel/default.png" alt="" loading="lazy"> **Apache SeaTunnel**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=SeaTunnel)
@@ -1311,6 +1409,13 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
- [Apache Teaclave (Rust Crates) security model](https://github.com/apache/teaclave-crates/blob/main/docs/security-model.md)
- [Apache Teaclave TrustZone SDK security model](https://github.com/apache/teaclave-trustzone-sdk/blob/main/docs/security-model.md)
- [Apache Teaclave SGX SDK security model](https://github.com/apache/teaclave-sgx-sdk/blob/main/docs/security-model.md)
+- **Apache Texera (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Texera%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
+ - Security model:
+ - [Apache Texera (Incubating) security model](https://github.com/apache/texera/blob/main/SECURITY.md)
- <img class="project-logo" src="https://www.apache.org/logos/res/tez/default.png" alt="" loading="lazy"> **Apache Tez**
- **Security contact:**\
[security@apache.org](mailto:security@apache.org?subject=Tez)
@@ -1351,6 +1456,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
none so far
- Security model:
- [Apache TomEE security model](https://github.com/apache/tomee/security/policy)
+- <img class="project-logo" src="https://www.apache.org/logos/res/toree/default.png" alt="" loading="lazy"> **Apache Toree (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=Toree%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
- <img class="project-logo" src="https://www.apache.org/logos/res/trafficserver/default.png" alt="" loading="lazy"> **Apache Traffic Server**
- **Security contact:**\
[security@trafficserver.apache.org](mailto:security@trafficserver.apache.org?subject=Traffic%20Server)
@@ -1476,6 +1586,11 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security.apache.org](/projects/xmlgraphics/)
- Security model:
- [Apache XML Graphics security model](https://xmlgraphics.apache.org/security.html)
+- **Apache XTable (Incubating)**
+ - **Security contact:**\
+ [security@apache.org](mailto:security@apache.org?subject=XTable%20%28Incubating%29)
+ - Advisories (experimental):\
+ none so far
</section>
<section class="project-tab-panel" role="tabpanel" data-letter="Y">
diff --git a/content/projects/answer/_index.md b/content/projects/answer/_index.md
index ffa7b21a..4e80f2d0 100644
--- a/content/projects/answer/_index.md
+++ b/content/projects/answer/_index.md
@@ -18,6 +18,160 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Residual Administrative API Key Access After Role or Account Revocation ## { #CVE-2026-60053 }
+
+CVE-2026-60053 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-60053) [\[CVE json\]](./CVE-2026-60053.cve.json) [\[OSV json\]](./CVE-2026-60053.osv.json)
+
+
+
+_Last updated: 2026-08-05T15:13:06.027Z_
+
+### Affected
+
+* Apache Answer through 2.0.1
+
+
+### Description
+
+<p>Insufficient Session Expiration vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Administrative API keys remained usable after the owning administrator was demoted or the account was marked inactive, suspended, or deleted, allowing continued access until the keys were explicitly removed.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/2vkcj3bdvso6cywnklt2vtkc2m4o0b5c
+
+
+### Credits
+* yangxi (reporter)
+
+
+## Unauthorized disclosure of deleted or pending answer content ## { #CVE-2026-60023 }
+
+CVE-2026-60023 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-60023) [\[CVE json\]](./CVE-2026-60023.cve.json) [\[OSV json\]](./CVE-2026-60023.osv.json)
+
+
+
+_Last updated: 2026-08-05T15:12:01.731Z_
+
+### Affected
+
+* Apache Answer through 2.0.1
+
+
+### Description
+
+<p>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/rq3ygd0j9cchkbmh99dqf8624s7r8y49
+
+
+### Credits
+* yangxi (reporter)
+
+
+## Missing authorization in revision audit reject allows authenticated users to reject pending revisions ## { #CVE-2026-50749 }
+
+CVE-2026-50749 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-50749) [\[CVE json\]](./CVE-2026-50749.cve.json) [\[OSV json\]](./CVE-2026-50749.osv.json)
+
+
+
+_Last updated: 2026-08-05T15:11:00.104Z_
+
+### Affected
+
+* Apache Answer through 2.0.1
+
+
+### Description
+
+<p>Improper Authorization vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Any authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/ogk461yr4w9o95k15bkjxk2kpbkrbnln
+
+
+### Credits
+* tonghuaroot (reporter)
+* Mattia Campanelli (reporter)
+* Cavan Loughran (reporter)
+* Xi Yang (reporter)
+
+
+## Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL ## { #CVE-2026-48912 }
+
+CVE-2026-48912 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-48912) [\[CVE json\]](./CVE-2026-48912.cve.json) [\[OSV json\]](./CVE-2026-48912.osv.json)
+
+
+
+_Last updated: 2026-08-05T15:10:03.446Z_
+
+### Affected
+
+* Apache Answer through 2.0.1
+
+
+### Description
+
+<p>Improper Input Validation vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p> A missing ownership check in the avatar-cleanup logic allows any authenticated user to delete other users' uploaded files by supplying their file URLs.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/b9jnttmspd9kp4vgbvb32dcqb4201flq
+
+
+### Credits
+* tonghuaroot (reporter)
+
+
+## Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow ## { #CVE-2026-48911 }
+
+CVE-2026-48911 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-48911) [\[CVE json\]](./CVE-2026-48911.cve.json) [\[OSV json\]](./CVE-2026-48911.osv.json)
+
+
+
+_Last updated: 2026-08-05T15:09:10.774Z_
+
+### Affected
+
+* Apache Answer through 2.0.1
+
+
+### Description
+
+<p>Insufficient Verification of Data Authenticity vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>A missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confirmation link.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/mrlwtdnhqqgfbchjgq6rffkz67o8wyv8
+
+
+### Credits
+* tonghuaroot (reporter)
+* yangxi (reporter)
+
+
+## Denial of service via crafted Accept-Language header parsing ## { #CVE-2026-48834 }
+
+CVE-2026-48834 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-48834) [\[CVE json\]](./CVE-2026-48834.cve.json) [\[OSV json\]](./CVE-2026-48834.osv.json)
+
+
+
+_Last updated: 2026-08-05T15:07:31.168Z_
+
+### Affected
+
+* Apache Answer through 2.0.1
+
+
+### Description
+
+<p>Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Unauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/0yg5smwnbrhqs55m5h61gn42mcs8s95p
+
+
+### Credits
+* tonghuaroot (reporter)
+
+
## Unlisted Questions Accessible via Direct API Access ## { #CVE-2026-34905 }
CVE-2026-34905 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-34905) [\[CVE json\]](./CVE-2026-34905.cve.json) [\[OSV json\]](./CVE-2026-34905.osv.json)
diff --git a/content/projects/apr/_index.md b/content/projects/apr/_index.md
index 5181e3c5..312e2086 100644
--- a/content/projects/apr/_index.md
+++ b/content/projects/apr/_index.md
@@ -18,13 +18,139 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Heap buffer overflow in APR memcached client ## { #CVE-2026-34502 }
+
+CVE-2026-34502 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-34502) [\[CVE json\]](./CVE-2026-34502.cve.json) [\[OSV json\]](./CVE-2026-34502.osv.json)
+
+
+
+_Last updated: 2026-08-06T14:31:06.399Z_
+
+### Affected
+
+* Apache Portable Runtime Utility from 1.3.0 through 1.6.3
+
+
+### Description
+
+<p>Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client</p><p>This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.<br></p>
+
+### References
+* https://lists.apache.org/thread/spk5643m4vq0mb8h5b9hz9gkp57ombl8
+
+
+### Credits
+* Elhanan Haenel (finder)
+
+
+## Heap buffer overflow in APR redis client ## { #CVE-2026-34501 }
+
+CVE-2026-34501 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-34501) [\[CVE json\]](./CVE-2026-34501.cve.json) [\[OSV json\]](./CVE-2026-34501.osv.json)
+
+
+
+_Last updated: 2026-08-06T14:31:46.904Z_
+
+### Affected
+
+* Apache Portable Runtime Utility from 1.6.0 through 1.6.3
+
+
+### Description
+
+<p>Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.</p><p>This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.</p><p>Users are recommended to upgrade to version 1.6.4, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/o8h6c7cq86fplxlnry6c3rn9x0ovq8mv
+
+
+### Credits
+* Elhanan Haenel (finder)
+
+
+## SQL Injection in apr_dbd_oracle ## { #CVE-2026-34191 }
+
+CVE-2026-34191 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-34191) [\[CVE json\]](./CVE-2026-34191.cve.json) [\[OSV json\]](./CVE-2026-34191.osv.json)
+
+
+
+_Last updated: 2026-08-06T14:32:23.055Z_
+
+### Affected
+
+* Apache Portable Runtime Utility from 1.6.0 through 1.6.3
+
+
+### Description
+
+<p>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.</p><p>This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3<br></p>
+
+### References
+* https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf
+
+
+### Credits
+* Elhanan Haenel (finder)
+
+
+## apr-util XML stack recursion crash ## { #CVE-2026-32327 }
+
+CVE-2026-32327 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-32327) [\[CVE json\]](./CVE-2026-32327.cve.json) [\[OSV json\]](./CVE-2026-32327.osv.json)
+
+
+
+_Last updated: 2026-08-06T14:32:41.688Z_
+
+### Affected
+
+* Apache Portable Runtime Utility through 1.6.3
+
+
+### Description
+
+A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function.<br><br>Users are recommended to upgrade to version 1.6.4, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/hq27vj8yfno9tkwv0fpj6jksfzgxvth1
+
+
+### Credits
+* Younghyo Cho @ CISLab, SeoulTech (finder)
+* 4ra1n, pyn3rd and unam4 (finder)
+
+
+## apr_password_validate() vulnerable to timing attack ## { #CVE-2025-49506 }
+
+CVE-2025-49506 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2025-49506) [\[CVE json\]](./CVE-2025-49506.cve.json) [\[OSV json\]](./CVE-2025-49506.osv.json)
+
+
+
+_Last updated: 2026-08-06T14:33:11.589Z_
+
+### Affected
+
+* Apache Portable Runtime Utility from 1.2.0 through 1.6.3
+
+
+### Description
+
+<div>APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt() such as <span style="background-color: rgb(255, 255, 255);"> Windows, BeOS, NetWare, or Android.</span></div><div>Users are recommended to upgrade to version 1.6.4, which fixes this issue.<br></div><div></div>
+
+### References
+* https://lists.apache.org/thread/2v8o3bj9pb7lfcr57bdnjg9xfkj04mg5
+
+
+### Credits
+* Michael Rowley <michael csirt.global> (finder)
+
+
## Unexpected lax shared memory permissions ## { #CVE-2023-49582 }
CVE-2023-49582 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2023-49582) [\[CVE json\]](./CVE-2023-49582.cve.json) [\[OSV json\]](./CVE-2023-49582.osv.json)
-_Last updated: 2024-08-26T14:03:42.543Z_
+_Last updated: 2026-08-06T13:47:55.389Z_
### Affected
diff --git a/content/projects/cxf/_index.md b/content/projects/cxf/_index.md
index 9bef5ee8..30319bb8 100644
--- a/content/projects/cxf/_index.md
+++ b/content/projects/cxf/_index.md
@@ -18,13 +18,329 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Revocation bypass in DefaultEncryptingOAuthDataProvider ## { #CVE-2026-68481 }
+
+CVE-2026-68481 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68481) [\[CVE json\]](./CVE-2026-68481.cve.json) [\[OSV json\]](./CVE-2026-68481.osv.json)
+
+
+
+_Last updated: 2026-08-06T11:22:36.450Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The authorization server MUST invalidate the token.' and 'introspection of a revoked token MUST return {"active":false}'. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.
+
+### References
+* https://lists.apache.org/thread/88c0h10yjb2b8201o1km3st71fs2zw2b
+
+
+### Credits
+* Guanping Zhang reported this vulnerability (finder)
+
+
+## DefaultEncryptingCodeDataProvider allows unlimited authorization code replay ## { #CVE-2026-68079 }
+
+CVE-2026-68079 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68079) [\[CVE json\]](./CVE-2026-68079.cve.json) [\[OSV json\]](./CVE-2026-68079.osv.json)
+
+
+
+_Last updated: 2026-08-06T11:22:56.675Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that "The authorization code MUST NOT be used more than once." Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.
+
+### References
+* https://lists.apache.org/thread/6m06gdqz4rxhy9g90qz9lyqx2gqmf13o
+
+
+### Credits
+* Guanping Zhang reported this vulnerability (finder)
+
+
+## Unsafe deserialization of inbound JMS ObjectMessage ## { #CVE-2026-66909 }
+
+CVE-2026-66909 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66909) [\[CVE json\]](./CVE-2026-66909.cve.json) [\[OSV json\]](./CVE-2026-66909.osv.json)
+
+
+
+_Last updated: 2026-08-06T10:23:22.148Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+<span style="background-color: rgb(252, 252, 251);">Apache CXF's JMS transport deserializes the body of any inbound </span><code>JMS ObjectMessage</code><span style="background-color: rgb(252, 252, 251);"> using native Java deserialization, with no type restrictions in place. An</span><span style="background-color: rgb(252, 252, 251);">y attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or, if a s [...]
+
+### References
+* https://lists.apache.org/thread/lr5d4tg6tf7j29jmw8wt242oowonjqpx
+
+
+### Credits
+* Reported by n0mi1k (finder)
+
+
+## Self-issued ID token claims validation skipped ## { #CVE-2026-65583 }
+
+CVE-2026-65583 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-65583) [\[CVE json\]](./CVE-2026-65583.cve.json) [\[OSV json\]](./CVE-2026-65583.osv.json)
+
+
+
+_Last updated: 2026-08-06T11:23:16.168Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j
+
+
+### Credits
+* Guanping Zhang reported this vulnerability. (finder)
+
+
+## XXE via WSDL/XSD import parsing ## { #CVE-2026-65432 }
+
+CVE-2026-65432 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-65432) [\[CVE json\]](./CVE-2026-65432.cve.json) [\[OSV json\]](./CVE-2026-65432.osv.json)
+
+
+
+_Last updated: 2026-08-06T10:26:07.597Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+<span style="background-color: rgb(253, 253, 252);">Apache CXF reads a top-level WSDL through its hardened </span><code>StaxUtils</code><span style="background-color: rgb(253, 253, 252);"> path, which disables XML DTDs and external entities. However, any </span><code><wsdl:import></code><span style="background-color: rgb(253, 253, 252);"> or </span><code><xsd:import></code><span style="background-color: rgb(253, 253, 252);"> referenced from that top-level WSDL [...]
+
+### References
+* https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3
+
+
+### Credits
+* Reported by n0mi1k (finder)
+
+
+## Denial of service via message header attachments ## { #CVE-2026-64958 }
+
+CVE-2026-64958 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-64958) [\[CVE json\]](./CVE-2026-64958.cve.json) [\[OSV json\]](./CVE-2026-64958.osv.json)
+
+
+
+_Last updated: 2026-08-06T10:13:02.649Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.
+
+### References
+* https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb
+
+
+### Credits
+* Markus Vogl, RISE GmbH (finder)
+
+
+## JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters ## { #CVE-2026-63687 }
+
+CVE-2026-63687 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-63687) [\[CVE json\]](./CVE-2026-63687.cve.json) [\[OSV json\]](./CVE-2026-63687.osv.json)
+
+
+
+_Last updated: 2026-08-06T11:23:42.840Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that can produce a validly-signed request JWT (e.g., one whose client_secret is known or compromised) can thereby substitute the code_challenge, code_challenge_method, nonce, and state values that were set in the outer HTTP request, undermining PKCE integrity and OpenID Connect replay protection. Users are recommended [...]
+
+### References
+* https://lists.apache.org/thread/drcq4chmt0btx86f17o47j17r378hzpw
+
+
+### Credits
+* Guanping Zhang reported this vulnerability. (finder)
+
+
+## OAuth2 Dynamic Client Registration Scope Self-Escalation ## { #CVE-2026-61466 }
+
+CVE-2026-61466 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61466) [\[CVE json\]](./CVE-2026-61466.cve.json) [\[OSV json\]](./CVE-2026-61466.osv.json)
+
+
+
+_Last updated: 2026-08-06T11:24:26.209Z_
+
+### Affected
+
+* Apache CXF before 3.6.12
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF from 4.2.0 before 4.2.3
+
+
+### Description
+
+<p>In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This could lead to a client self-assigning privileged scopes at registration time. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.</p>
+
+### References
+* https://lists.apache.org/thread/2l1r16g79tpxd7fzrzr2q9oscwrjgljs
+
+
+### Credits
+* Guanping Zhang reported this vulnerability. (finder)
+
+
+## No default restriction on the amount of form parameters per message ## { #CVE-2026-57819 }
+
+CVE-2026-57819 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-57819) [\[CVE json\]](./CVE-2026-57819.cve.json) [\[OSV json\]](./CVE-2026-57819.osv.json)
+
+
+
+_Last updated: 2026-08-06T10:12:25.051Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the "maxFormParameterCount" configuration option. However, no default limit is set which may lead to denial of service attacks when processing requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.
+
+### References
+* https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov
+
+
+## OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider ## { #CVE-2026-57818 }
+
+CVE-2026-57818 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-57818) [\[CVE json\]](./CVE-2026-57818.cve.json) [\[OSV json\]](./CVE-2026-57818.osv.json)
+
+
+
+_Last updated: 2026-08-06T11:24:52.308Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.<br>
+
+### References
+* https://lists.apache.org/thread/7q08mz8bcbosp25wok7gr537zlp15mfz
+
+
+### Credits
+* Guanping Zhang reported this vulnerability (finder)
+
+
+## The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow ## { #CVE-2026-57817 }
+
+CVE-2026-57817 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-57817) [\[CVE json\]](./CVE-2026-57817.cve.json) [\[OSV json\]](./CVE-2026-57817.osv.json)
+
+
+
+_Last updated: 2026-08-06T10:24:04.605Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider (IdP) that omits the `c_hash`, the RP becomes vulnerable to Authorization Code Substitution/Injection attacks. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.
+
+### References
+* https://lists.apache.org/thread/pj63c3pf7kkp1xhr53do704fwj3t3htn
+
+
+### Credits
+* Guanping Zhang reported this vulnerability. (finder)
+
+
+## Denial of Service attack via large attachments ## { #CVE-2026-54225 }
+
+CVE-2026-54225 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-54225) [\[CVE json\]](./CVE-2026-54225.cve.json) [\[OSV json\]](./CVE-2026-54225.osv.json)
+
+
+
+_Last updated: 2026-08-06T10:11:39.713Z_
+
+### Affected
+
+* Apache CXF from 4.2.0 before 4.2.3
+* Apache CXF from 4.0.0 before 4.1.8
+* Apache CXF before 3.6.12
+
+
+### Description
+
+Apache CXF allows to control the maximum attachment size via the "attachment-max-size". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which fixes this problem by imposing a default attachment size limit of 50mb.
+
+### References
+* https://lists.apache.org/thread/h2bjqm6g58z0j6893qzh728kdtk1byfy
+
+
## No restriction on attachment headers per message ## { #CVE-2026-50645 }
CVE-2026-50645 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-50645) [\[CVE json\]](./CVE-2026-50645.cve.json) [\[OSV json\]](./CVE-2026-50645.osv.json)
-_Last updated: 2026-06-12T09:06:59.203Z_
+_Last updated: 2026-08-07T11:18:25.630Z_
### Affected
diff --git a/content/projects/fineract/_index.md b/content/projects/fineract/_index.md
index 617ee287..df518b93 100644
--- a/content/projects/fineract/_index.md
+++ b/content/projects/fineract/_index.md
@@ -81,7 +81,7 @@ CVE-2026-35152 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-35152) [\[CVE jso
-_Last updated: 2026-07-15T09:19:53.550Z_
+_Last updated: 2026-08-05T12:05:58.976Z_
### Affected
diff --git a/content/projects/fluss/_index.md b/content/projects/fluss/_index.md
index a5ac8bd0..695c8e64 100644
--- a/content/projects/fluss/_index.md
+++ b/content/projects/fluss/_index.md
@@ -8,9 +8,14 @@ layout: single
Do you want disclose a potential security issue for Apache Fluss? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=Fluss).
+You can read more about the security policy on:
+
+- [Apache Fluss security model](https://fluss.apache.org/docs/security/overview/)
+
+
# Advisories
-This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
+This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
## Apache Fluss Netty Frame Decoder Memory Exhaustion Vulnerability ## { #CVE-2026-49361 }
diff --git a/content/projects/fory/_index.md b/content/projects/fory/_index.md
index 317a3058..76139c0d 100644
--- a/content/projects/fory/_index.md
+++ b/content/projects/fory/_index.md
@@ -18,6 +18,83 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path ## { #CVE-2026-71560 }
+
+CVE-2026-71560 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-71560) [\[CVE json\]](./CVE-2026-71560.cve.json) [\[OSV json\]](./CVE-2026-71560.osv.json)
+
+
+
+_Last updated: 2026-08-07T08:53:32.515Z_
+
+### Affected
+
+* Apache Fory from 0.14.0 before 1.5.0
+
+
+### Description
+
+<p>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.<br><br>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.</p>
+<p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications that do not use Apache Fory C++ or do not use tagged integer fields are not affected.</p><br>
+
+### References
+* https://lists.apache.org/thread/xl2g544kctbgozccnj35qts43p452y5x
+
+
+### Credits
+* Zhixi "Jace Sun", independent security researcher (reporter)
+
+
+## Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata ## { #CVE-2026-71559 }
+
+CVE-2026-71559 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-71559) [\[CVE json\]](./CVE-2026-71559.cve.json) [\[OSV json\]](./CVE-2026-71559.osv.json)
+
+
+
+_Last updated: 2026-08-07T08:56:04.066Z_
+
+### Affected
+
+* Apache Fory from 0.16.0 before 1.5.0
+
+
+### Description
+
+<p>Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.</p><p>This issue affects Apache Fory: from 0.16.0 before 1.5.0. Users of other language implementations are not affected.</p><p>Users are recommended to upgrade to version 1.5.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/f28bw002p32yt723rvv3dcwdkljys8r3
+
+
+### Credits
+* Zhixi "Jace Sun", independent security researcher (reporter)
+
+
+## Heap type confusion in C++ polymorphic smart-pointer deserialization ## { #CVE-2026-71558 }
+
+CVE-2026-71558 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-71558) [\[CVE json\]](./CVE-2026-71558.cve.json) [\[OSV json\]](./CVE-2026-71558.osv.json)
+
+
+
+_Last updated: 2026-08-07T08:54:53.115Z_
+
+### Affected
+
+* Apache Fory from 0.14.0 before 1.5.0
+
+
+### Description
+
+<p>Heap type confusion vulnerability in Apache Fory C++ deserialization.<br><br>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserialization, causing an object of an incompatible type to be treated as the declared base type. This may result in undefined behavior and potentially lead to denial of service or arbitrary code execution.</p>
+<p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications not using Apache Fory C++ polymorphic smart-pointer deserialization are not affected.</p><br>
+
+### References
+* https://lists.apache.org/thread/oywndv60jwqdv6j37t7bc1qbcc4b235r
+
+
+### Credits
+* Zhixi "Jace Sun", independent security researcher (reporter)
+
+
## Out-of-Bounds Read via sun.misc.Unsafe in zero-copy java deserialization ## { #CVE-2026-64609 }
CVE-2026-64609 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-64609) [\[CVE json\]](./CVE-2026-64609.cve.json) [\[OSV json\]](./CVE-2026-64609.osv.json)
diff --git a/content/projects/iotdb/_index.md b/content/projects/iotdb/_index.md
index d9565457..5804fc9b 100644
--- a/content/projects/iotdb/_index.md
+++ b/content/projects/iotdb/_index.md
@@ -18,6 +18,28 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## RPC service denial of service via unchecked Thrift string length ## { #CVE-2026-44630 }
+
+CVE-2026-44630 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-44630) [\[CVE json\]](./CVE-2026-44630.cve.json) [\[OSV json\]](./CVE-2026-44630.osv.json)
+
+
+
+_Last updated: 2026-08-10T09:25:10.202Z_
+
+### Affected
+
+* Apache IoTDB before 1.3.8
+* Apache IoTDB from 2.0.0 before 2.0.10
+
+
+### Description
+
+<p>Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.<br></p><p>This issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.</p><p>Users are recommended to upgrade to version 2.0.10, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/tfsgd9whbq79lgjvdzj44hw0fhsofly8
+
+
## Out-of-bounds reads in C++ client TsBlock deserializer crash client process on malformed server data ## { #CVE-2026-40454 }
CVE-2026-40454 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-40454) [\[CVE json\]](./CVE-2026-40454.cve.json) [\[OSV json\]](./CVE-2026-40454.osv.json)
diff --git a/content/projects/jena/_index.md b/content/projects/jena/_index.md
index e339b3c5..6b5d4b49 100644
--- a/content/projects/jena/_index.md
+++ b/content/projects/jena/_index.md
@@ -18,6 +18,27 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Web requests using SPARQL Update can escape file restrictions ## { #CVE-2026-61372 }
+
+CVE-2026-61372 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61372) [\[CVE json\]](./CVE-2026-61372.cve.json) [\[OSV json\]](./CVE-2026-61372.osv.json)
+
+
+
+_Last updated: 2026-08-03T15:19:33.471Z_
+
+### Affected
+
+* Apache Jena Fuseki through 6.1.0
+
+
+### Description
+
+<p>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki.</p><p>This issue affects Apache Jena Fuseki: through 6.1.0.</p><p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84
+
+
## Configuration files uploaded by administrative users are not check properly ## { #CVE-2025-50151 }
CVE-2025-50151 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2025-50151) [\[CVE json\]](./CVE-2025-50151.cve.json) [\[OSV json\]](./CVE-2025-50151.osv.json)
diff --git a/content/projects/lucy/_index.md b/content/projects/lucy/_index.md
new file mode 100644
index 00000000..efe5a236
--- /dev/null
+++ b/content/projects/lucy/_index.md
@@ -0,0 +1,97 @@
+---
+title: Apache Lucy security advisories
+description: Security information for Apache Lucy
+layout: single
+---
+
+# Reporting
+
+Do you want disclose a potential security issue for Apache Lucy? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=Lucy).
+
+# Advisories
+
+This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
+{.bg-warning}
+
+## stack-buffer-overflow in JSON parser error reporter on malformed input ## { #CVE-2026-61486 }
+
+CVE-2026-61486 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61486) [\[CVE json\]](./CVE-2026-61486.cve.json) [\[OSV json\]](./CVE-2026-61486.osv.json)
+
+
+
+_Last updated: 2026-08-05T06:44:06.722Z_
+
+### Affected
+
+* Apache Lucy through *
+
+
+### Description
+
+<p>** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>
+
+### References
+* https://lists.apache.org/thread/z88yv1z19ppsd4td4nqtg7q72fvqh01b
+
+
+## Freezer/InStream deserialization bomb - unbounded allocation reading an index ## { #CVE-2026-61485 }
+
+CVE-2026-61485 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61485) [\[CVE json\]](./CVE-2026-61485.cve.json) [\[OSV json\]](./CVE-2026-61485.osv.json)
+
+
+
+_Last updated: 2026-08-05T06:43:22.936Z_
+
+### Affected
+
+* Apache Lucy through *
+
+
+### Description
+
+<p>** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>
+
+### References
+* https://lists.apache.org/thread/4q9rfscp3tkjr3kt7lsg97szhmydl23s
+
+
+## LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS ## { #CVE-2026-61484 }
+
+CVE-2026-61484 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61484) [\[CVE json\]](./CVE-2026-61484.cve.json) [\[OSV json\]](./CVE-2026-61484.osv.json)
+
+
+
+_Last updated: 2026-08-05T06:42:01.626Z_
+
+### Affected
+
+* Apache Lucy before *
+
+
+### Description
+
+<p>** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>
+
+### References
+* https://lists.apache.org/thread/942t3pwgz2nrhnklrtyt5zr7g4wqc9cb
+
+
+## QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS ## { #CVE-2026-61483 }
+
+CVE-2026-61483 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61483) [\[CVE json\]](./CVE-2026-61483.cve.json) [\[OSV json\]](./CVE-2026-61483.osv.json)
+
+
+
+_Last updated: 2026-08-05T06:35:55.863Z_
+
+### Affected
+
+* Apache Lucy through *
+
+
+### Description
+
+<p>** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>
+
+### References
+* https://lists.apache.org/thread/ltp8320c0nsy45bpzm8342jd7yj05z1h
diff --git a/content/projects/nifi/_index.md b/content/projects/nifi/_index.md
index bb9e1554..fdfd13e4 100644
--- a/content/projects/nifi/_index.md
+++ b/content/projects/nifi/_index.md
@@ -18,6 +18,106 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Uncontrolled Resource Consumption through Decompression of HTTP Requests ## { #CVE-2026-68981 }
+
+CVE-2026-68981 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68981) [\[CVE json\]](./CVE-2026-68981.cve.json) [\[OSV json\]](./CVE-2026-68981.osv.json)
+
+
+
+_Last updated: 2026-08-03T19:59:53.029Z_
+
+### Affected
+
+* Apache NiFi from 1.5.0 through 2.10.0
+
+
+### Description
+
+Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compression to Jetty Server and disables decompressi [...]
+
+### References
+* https://lists.apache.org/thread/vxrqn7poyf1wx6gdy7c0dxqfqkctjngg
+
+
+### Credits
+* mak3bread (Minseong Kim) (finder)
+
+
+## Authorization Bypass for Parameter Context Asset Deletion ## { #CVE-2026-68980 }
+
+CVE-2026-68980 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68980) [\[CVE json\]](./CVE-2026-68980.cve.json) [\[OSV json\]](./CVE-2026-68980.osv.json)
+
+
+
+_Last updated: 2026-08-03T19:58:50.048Z_
+
+### Affected
+
+* Apache NiFi from 2.0.0 through 2.10.0
+
+
+### Description
+
+Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework performed authorized based on the supplied Parameter Context Identifier without verifying the requested Identifier against the stored Identifier. Apache NiFi installations that do not implement [...]
+
+### References
+* https://lists.apache.org/thread/yo8k6tt3zxjm49zzhly3453v0xhwm3o1
+
+
+### Credits
+* mak3bread (Minseong Kim) (finder)
+
+
+## Missing Authorization for Components Referenced by Parameter Context Updates ## { #CVE-2026-68979 }
+
+CVE-2026-68979 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68979) [\[CVE json\]](./CVE-2026-68979.cve.json) [\[OSV json\]](./CVE-2026-68979.osv.json)
+
+
+
+_Last updated: 2026-08-03T20:00:00.439Z_
+
+### Affected
+
+* Apache NiFi from 1.10.0 through 2.10.0
+
+
+### Description
+
+Apache NiFi 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization was limited to read and write privileges on the Parameter Context itself. As a result of the missing authorization, an authenticated user authorized to modify a Parameter Context, but not authorize [...]
+
+### References
+* https://lists.apache.org/thread/xwz8wsss2ovx07tns96rkc3n7cm4xfrq
+
+
+### Credits
+* D0HY30N (finder)
+
+
+## Incorrect Authorization for Parameter Context Validation Requests ## { #CVE-2026-62354 }
+
+CVE-2026-62354 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-62354) [\[CVE json\]](./CVE-2026-62354.cve.json) [\[OSV json\]](./CVE-2026-62354.osv.json)
+
+
+
+_Last updated: 2026-08-03T19:57:33.492Z_
+
+### Affected
+
+* Apache NiFi from 1.10.0 through 2.10.0
+
+
+### Description
+
+Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation methods with alternative settings. Apache NiFi installations that do not implement different levels of authorization for viewing and modifying Parameter Context configuration are not subject to t [...]
+
+### References
+* https://lists.apache.org/thread/l17xcnnf1rm7qljmypyjxmh62cx4o4wj
+
+
+### Credits
+* Nguyen Van Hiep from MBBank (finder)
+
+
## Missing Validation for Proxy Host Headers ## { #CVE-2026-54665 }
CVE-2026-54665 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-54665) [\[CVE json\]](./CVE-2026-54665.cve.json) [\[OSV json\]](./CVE-2026-54665.osv.json)
diff --git a/content/projects/polaris/_index.md b/content/projects/polaris/_index.md
index cd387d8e..ffa5b22f 100644
--- a/content/projects/polaris/_index.md
+++ b/content/projects/polaris/_index.md
@@ -19,6 +19,31 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security pages linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## register endpoint reads attacker-controlled storage location before allowed-locations validation ## { #CVE-2026-64640 }
+
+CVE-2026-64640 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-64640) [\[CVE json\]](./CVE-2026-64640.cve.json) [\[OSV json\]](./CVE-2026-64640.osv.json)
+
+
+
+_Last updated: 2026-08-06T09:08:05.017Z_
+
+### Affected
+
+* Apache Polaris through 1.6.0
+
+
+### Description
+
+Apache Polaris did not consistently validate storage locations supplied during table and view registration.<br><br><div>An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials to read a caller-selected Iceberg metadata file before verifying that the file was within the catalog's allowed storage locations.</div><div>If the catalog's underlying credentials c [...]
+
+### References
+* https://lists.apache.org/thread/scd8p9wy8b9j3om5wohbotpfycnmmjl4
+
+
+### Credits
+* Andrea Cosentino (finder)
+
+
## write.metadata.path changes could bypass location validation and broaden delegated storage access ## { #CVE-2026-42812 }
CVE-2026-42812 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-42812) [\[CVE json\]](./CVE-2026-42812.cve.json) [\[OSV json\]](./CVE-2026-42812.osv.json)
diff --git a/content/projects/qpid/_index.md b/content/projects/qpid/_index.md
new file mode 100644
index 00000000..90bd386e
--- /dev/null
+++ b/content/projects/qpid/_index.md
@@ -0,0 +1,522 @@
+---
+title: Apache Qpid security advisories
+description: Security information for Apache Qpid
+layout: single
+---
+
+# Reporting
+
+Do you want disclose a potential security issue for Apache Qpid? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=Qpid).
+
+# Advisories
+
+This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
+{.bg-warning}
+
+## Unbounded echo flow responses can lead to denial of service ## { #CVE-2026-68080 }
+
+CVE-2026-68080 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68080) [\[CVE json\]](./CVE-2026-68080.cve.json) [\[OSV json\]](./CVE-2026-68080.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:51:18.656Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/tcnrv5nhmnsrzz92o4owxgycro6llt57
+
+
+## Unable to govern the maximum number of transfer frames per incoming delivery ## { #CVE-2026-68078 }
+
+CVE-2026-68078 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68078) [\[CVE json\]](./CVE-2026-68078.cve.json) [\[OSV json\]](./CVE-2026-68078.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:43:32.321Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/m8gs6pfp1fmbgwcjr8zsgn95hfh15f8o
+
+
+## Unbounded disposition range handling can lead to denial of service ## { #CVE-2026-68077 }
+
+CVE-2026-68077 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68077) [\[CVE json\]](./CVE-2026-68077.cve.json) [\[OSV json\]](./CVE-2026-68077.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:41:03.741Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/gzc78gdrlw2711v8jzgmsto8bqvg28y8
+
+
+## Incoming session flow control window can be exceeded ## { #CVE-2026-68075 }
+
+CVE-2026-68075 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68075) [\[CVE json\]](./CVE-2026-68075.cve.json) [\[OSV json\]](./CVE-2026-68075.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:35:58.182Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/lht725jgkowmyyjl039roffg6pyvbxz0
+
+
+## Unbounded symbol value caching can lead to pre-authentication resource exhaustion ## { #CVE-2026-68074 }
+
+CVE-2026-68074 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68074) [\[CVE json\]](./CVE-2026-68074.cve.json) [\[OSV json\]](./CVE-2026-68074.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:19:51.744Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/9t1pvl36z69ssww6449od5g0tszqnhjs
+
+
+## Unbounded type nesting can lead to pre-authentication stack overflow ## { #CVE-2026-68073 }
+
+CVE-2026-68073 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68073) [\[CVE json\]](./CVE-2026-68073.cve.json) [\[OSV json\]](./CVE-2026-68073.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:32:20.617Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/djz1gnrk882vzjo8rykyf9bnywqbvwwr
+
+
+## Type size/count handling can lead to excessive allocation pre-authentication ## { #CVE-2026-68060 }
+
+CVE-2026-68060 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-68060) [\[CVE json\]](./CVE-2026-68060.cve.json) [\[OSV json\]](./CVE-2026-68060.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:26:23.306Z_
+
+### Affected
+
+* Apache Qpid Broker-J through 10.0.1
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/0slvl8h25w3z4opnh08yyn8l3chko5c9
+
+
+## Unable to govern the maximum number of transfer frames per incoming delivery ## { #CVE-2026-67592 }
+
+CVE-2026-67592 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67592) [\[CVE json\]](./CVE-2026-67592.cve.json) [\[OSV json\]](./CVE-2026-67592.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:44:14.457Z_
+
+### Affected
+
+* Apache Qpid ProtonJ2 through 1.1.0
+
+
+### Description
+
+<div>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue</div>
+
+### References
+* https://lists.apache.org/thread/b4pv9hfdk7ox78pss77sb4nzwjrvqhhz
+
+
+## Incoming session flow control window can be exceeded ## { #CVE-2026-67591 }
+
+CVE-2026-67591 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67591) [\[CVE json\]](./CVE-2026-67591.cve.json) [\[OSV json\]](./CVE-2026-67591.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:38:21.990Z_
+
+### Affected
+
+* Apache Qpid ProtonJ2 through 1.1.0
+
+
+### Description
+
+<div>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/rwmggh2bkm6qotxpdfcplht3jgw5n036
+
+
+## Unbounded type nesting can lead to pre-authentication stackoverflow ## { #CVE-2026-67590 }
+
+CVE-2026-67590 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67590) [\[CVE json\]](./CVE-2026-67590.cve.json) [\[OSV json\]](./CVE-2026-67590.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:33:34.406Z_
+
+### Affected
+
+* Apache Qpid ProtonJ2 through 1.1.0
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/kmov6k7f3moqy01m1s370fl61vgos3ly
+
+
+## Type size/count handling can lead to excessive allocation pre-authentication ## { #CVE-2026-67589 }
+
+CVE-2026-67589 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67589) [\[CVE json\]](./CVE-2026-67589.cve.json) [\[OSV json\]](./CVE-2026-67589.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:28:10.043Z_
+
+### Affected
+
+* Apache Qpid ProtonJ2 through 1.1.0
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/bs24x4778dh72xtfs299cy8krvdlo47q
+
+
+### Credits
+* Apache Qpid security team (finder)
+* xxy010605@gmail.com (reporter)
+
+
+## Unbounded symbol value caching can lead to pre-authentication resource exhaustion ## { #CVE-2026-67588 }
+
+CVE-2026-67588 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67588) [\[CVE json\]](./CVE-2026-67588.cve.json) [\[OSV json\]](./CVE-2026-67588.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:21:39.842Z_
+
+### Affected
+
+* Apache Qpid ProtonJ2 through 1.1.0
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/vk4j02dzggfdrdkwvzmqo4jro2tgj0jt
+
+
+## Unable to govern the maximum number of transfer frames per incoming delivery ## { #CVE-2026-67555 }
+
+CVE-2026-67555 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67555) [\[CVE json\]](./CVE-2026-67555.cve.json) [\[OSV json\]](./CVE-2026-67555.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:43:53.150Z_
+
+### Affected
+
+* Apache Qpid Proton Dotnet through 1.0.0
+
+
+### Description
+
+<div>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/dwrb02dp714lvlfxdj4o5bc9h3z54sw3
+
+
+## Unbounded disposition range handling can lead to denial of service ## { #CVE-2026-67554 }
+
+CVE-2026-67554 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67554) [\[CVE json\]](./CVE-2026-67554.cve.json) [\[OSV json\]](./CVE-2026-67554.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:41:21.799Z_
+
+### Affected
+
+* Apache Qpid Proton Dotnet through 1.0.0
+
+
+### Description
+
+<div>An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/5ndlowz29464ytj98gz9z9ljhwnmb2hm
+
+
+## Incoming session flow control window can be exceeded ## { #CVE-2026-67553 }
+
+CVE-2026-67553 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67553) [\[CVE json\]](./CVE-2026-67553.cve.json) [\[OSV json\]](./CVE-2026-67553.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:37:23.826Z_
+
+### Affected
+
+* Apache Qpid Proton Dotnet through 1.0.0
+
+
+### Description
+
+<div>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/hvsncmcbgjrn85crs909nf4y3dqqrywo
+
+
+## Unbounded type nesting can lead to pre-authentication stackoverflow ## { #CVE-2026-67552 }
+
+CVE-2026-67552 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67552) [\[CVE json\]](./CVE-2026-67552.cve.json) [\[OSV json\]](./CVE-2026-67552.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:32:53.769Z_
+
+### Affected
+
+* Apache Qpid Proton Dotnet through 1.0.0
+
+
+### Description
+
+<div>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue</div>
+
+### References
+* https://lists.apache.org/thread/4dyg0gycrv55ox4oywqght61b053g8xj
+
+
+## Type size/count handling can lead to excessive allocation pre-authentication ## { #CVE-2026-67551 }
+
+CVE-2026-67551 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67551) [\[CVE json\]](./CVE-2026-67551.cve.json) [\[OSV json\]](./CVE-2026-67551.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:27:20.446Z_
+
+### Affected
+
+* Apache Qpid Proton Dotnet through 1.0.0
+
+
+### Description
+
+<div> pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>
+
+### References
+* https://lists.apache.org/thread/o566fhkrr3gg0lyzt24xwvz9w94oo6ro
+
+
+## Unbounded symbol value caching can lead to pre-authentication resource exhaustion ## { #CVE-2026-67465 }
+
+CVE-2026-67465 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-67465) [\[CVE json\]](./CVE-2026-67465.cve.json) [\[OSV json\]](./CVE-2026-67465.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:21:00.415Z_
+
+### Affected
+
+* Apache Qpid Proton Dotnet through 1.0.0
+
+
+### Description
+
+<p>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</p><p>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</p><p>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/zl2pj5fo32lbyrwof89tdyrgt67bbo0m
+
+
+## Unable to govern the maximum number of transfer frames per incoming delivery ## { #CVE-2026-66277 }
+
+CVE-2026-66277 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66277) [\[CVE json\]](./CVE-2026-66277.cve.json) [\[OSV json\]](./CVE-2026-66277.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:42:26.473Z_
+
+### Affected
+
+* Apache Qpid Proton-J through 0.34.1
+
+
+### Description
+
+<p>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/48tflr3sx0sxq9bcdy5rh06oy3gmwx02
+
+
+## Unbounded disposition range handling can lead to denial of service ## { #CVE-2026-66276 }
+
+CVE-2026-66276 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66276) [\[CVE json\]](./CVE-2026-66276.cve.json) [\[OSV json\]](./CVE-2026-66276.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:39:26.606Z_
+
+### Affected
+
+* Apache Qpid Proton-J through 0.34.1
+
+
+### Description
+
+<div>An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.</div><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/14nj0lpsqpnd3q0hw0t0tw44qvdo1jc2
+
+
+## Incoming session flow control window can be exceeded ## { #CVE-2026-66275 }
+
+CVE-2026-66275 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66275) [\[CVE json\]](./CVE-2026-66275.cve.json) [\[OSV json\]](./CVE-2026-66275.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:34:44.424Z_
+
+### Affected
+
+* Apache Qpid Proton-J through 0.34.1
+
+
+### Description
+
+<p>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/jds59nxrgcxtlx7xl0kvl5hqt07thxzt
+
+
+## Unbounded type nesting can lead to pre-authentication stackoverflow ## { #CVE-2026-66274 }
+
+CVE-2026-66274 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66274) [\[CVE json\]](./CVE-2026-66274.cve.json) [\[OSV json\]](./CVE-2026-66274.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:29:40.499Z_
+
+### Affected
+
+* Apache Qpid Proton-J through 0.34.1
+
+
+### Description
+
+<p>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/h7xolzws2by2qhdjf7scbx87foxojb5h
+
+
+## Type size/count handling can lead to excessive allocation pre-authentication ## { #CVE-2026-66273 }
+
+CVE-2026-66273 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66273) [\[CVE json\]](./CVE-2026-66273.cve.json) [\[OSV json\]](./CVE-2026-66273.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:23:28.044Z_
+
+### Affected
+
+* Apache Qpid Proton-J through 0.34.1
+
+
+### Description
+
+<p>A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/z34s9v5w05qk4qqtz5fs3v9wpxz6fnbh
+
+
+## Unbounded symbol value caching can lead to pre-authentication resource exhaustion ## { #CVE-2026-66257 }
+
+CVE-2026-66257 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66257) [\[CVE json\]](./CVE-2026-66257.cve.json) [\[OSV json\]](./CVE-2026-66257.osv.json)
+
+
+
+_Last updated: 2026-08-05T05:17:56.848Z_
+
+### Affected
+
+* Apache Qpid Proton-J through 0.34.1
+
+
+### Description
+
+<p>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/dnczt6bgfcq2x6q8ljco177h1qmv59fm
diff --git a/content/projects/ranger/_index.md b/content/projects/ranger/_index.md
index cc01afed..d2a2ac86 100644
--- a/content/projects/ranger/_index.md
+++ b/content/projects/ranger/_index.md
@@ -18,6 +18,254 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## UnixAuth lacks brute-force protection ## { #CVE-2026-65948 }
+
+CVE-2026-65948 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-65948) [\[CVE json\]](./CVE-2026-65948.cve.json) [\[OSV json\]](./CVE-2026-65948.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:20:16.518Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+UnixAuth lacks brute-force protection in Apache Ranger versions <= 2.8.0. <br>Note: UnixAuth is NOT a recommended option for production deployments. <br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/cx53rbkxkn5hbvzv8ohwvndzrxhc06qf
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## Logs contain replayable JWT bearer tokens ## { #CVE-2026-65945 }
+
+CVE-2026-65945 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-65945) [\[CVE json\]](./CVE-2026-65945.cve.json) [\[OSV json\]](./CVE-2026-65945.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:20:39.245Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+Logs contain replayable JWT tokens in Apache Ranger versions <= 2.8.0<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/ww4b3d59r3pnhosljcrq9b98qzqtnclk
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## Clients accept TLS certificates issued for other hostnames ## { #CVE-2026-65942 }
+
+CVE-2026-65942 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-65942) [\[CVE json\]](./CVE-2026-65942.cve.json) [\[OSV json\]](./CVE-2026-65942.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:21:03.965Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+<span style="background-color: rgb(255, 255, 255);">TLS hostname verification issue</span> in Apache Ranger Client Code in versions <= 2.8.0.<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/pp6on4yyht3z8l0ktfo1xydhjzjbn4gt
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## Download APIs expose plugin data without authentication ## { #CVE-2026-55814 }
+
+CVE-2026-55814 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-55814) [\[CVE json\]](./CVE-2026-55814.cve.json) [\[OSV json\]](./CVE-2026-55814.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:21:26.393Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/yoorhnbxfydb5xoxlxlmms0f268rj9dh
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## Remote Code Execution Vulnerability in GraalScriptEngineCreator ## { #CVE-2026-55799 }
+
+CVE-2026-55799 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-55799) [\[CVE json\]](./CVE-2026-55799.cve.json) [\[OSV json\]](./CVE-2026-55799.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:23:27.092Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/mqpdrqrvd47x5vhy03xok4ylbo9wbqgj
+
+
+### Credits
+* kippford Q. <k3...@gmail.com> (finder)
+
+
+## Remote Code Execution via Arbitrary Class Instantiation ## { #CVE-2026-44416 }
+
+CVE-2026-44416 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-44416) [\[CVE json\]](./CVE-2026-44416.cve.json) [\[OSV json\]](./CVE-2026-44416.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:23:49.093Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+<span style="background-color: rgb(255, 255, 255);">Remote Code Execution via Arbitrary Class Instantiation</span> in <span style="background-color: rgb(255, 255, 255);">plugin-schema-registry</span> component in <span style="background-color: rgb(255, 255, 255);">Apache Ranger <= 2.8.0</span>.<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/2gqssqhwkzbpd8jx8q6986cwldr7qkdn
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## Remote Code Execution via JDBC URL Injection ## { #CVE-2026-42537 }
+
+CVE-2026-42537 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-42537) [\[CVE json\]](./CVE-2026-42537.cve.json) [\[OSV json\]](./CVE-2026-42537.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:24:33.165Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+<span style="background-color: rgb(255, 255, 255);">Remote Code Execution via JDBC URL Injection</span> in Apache Ranger <= 2.8.0<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/ymwvz8cwv3wm8fq21pnd7fco0l1m4wrp
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## Privilege Escalation via URL Parameter ## { #CVE-2026-40920 }
+
+CVE-2026-40920 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-40920) [\[CVE json\]](./CVE-2026-40920.cve.json) [\[OSV json\]](./CVE-2026-40920.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:25:48.184Z_
+
+### Affected
+
+* Apache Ranger through 2.8.0
+
+
+### Description
+
+Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0.<br><br>Users are recommended to upgrade to version 2.9.0, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/zh92fob9gqp196rvz3x9t0d2fnq9g27d
+
+
+### Credits
+* Andrew Rukin (Arenadata) (finder)
+
+
+## SQL Injection vulnerability in lookup functionality ## { #CVE-2026-32227 }
+
+CVE-2026-32227 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-32227) [\[CVE json\]](./CVE-2026-32227.cve.json)
+
+_Last updated: 2026-08-10T10:26:05.115Z_
+
+### Affected
+
+* Apache Ranger from 2.0.0 through 2.8.0 unknown
+
+
+### Description
+
+<p>SQL Injection vulnerability vulnerability in Apache Ranger.</p><p>This issue affects .</p><p>Users are recommended to upgrade to version 2.9.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/1zltfzd6rp683omrlv1zkxvkwm9d0nd2
+
+
+### Credits
+* 罗鑫 <lx...@gmail.com> (finder)
+
+
+## OS Command Injection via Username in UnixUserGroupBuilder ## { #CVE-2026-28672 }
+
+CVE-2026-28672 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-28672) [\[CVE json\]](./CVE-2026-28672.cve.json) [\[OSV json\]](./CVE-2026-28672.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:26:31.190Z_
+
+### Affected
+
+* Apache Ranger from 0.6 through 2.8
+
+
+### Description
+
+<p>Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.</p><p>This issue affects Apache Ranger: from 0.6 through 2.8.</p><p></p><div><br></div><br><p></p>
+
+### References
+* https://lists.apache.org/thread/99ysjqcmz950o3jgm6pqx1wb696onzq7
+
+
+### Credits
+* Andrea Cosentino (finder)
+
+
## Hostname verification bypass in NiFiRegistryClient and NifiClient ## { #CVE-2025-59060 }
CVE-2025-59060 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2025-59060) [\[CVE json\]](./CVE-2025-59060.cve.json) [\[OSV json\]](./CVE-2025-59060.osv.json)
diff --git a/content/projects/seata/_index.md b/content/projects/seata/_index.md
index 32aee11b..6bea3140 100644
--- a/content/projects/seata/_index.md
+++ b/content/projects/seata/_index.md
@@ -1,16 +1,16 @@
---
-title: Apache Seata security advisories
-description: Security information for Apache Seata
+title: Apache Seata (Incubating) security advisories
+description: Security information for Apache Seata (Incubating)
layout: single
---
# Reporting
-Do you want disclose a potential security issue for Apache Seata? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=Seata).
+Do you want disclose a potential security issue for Apache Seata (Incubating)? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=Seata%20%28Incubating%29).
You can read more about the security policy on:
-- [Apache Seata security model](https://seata.apache.org/docs/next/security/secret-key)
+- [Apache Seata (Incubating) security model](https://seata.apache.org/docs/next/security/secret-key)
# Advisories
diff --git a/content/projects/tapestry/_index.md b/content/projects/tapestry/_index.md
index 5e546877..f3ac5a65 100644
--- a/content/projects/tapestry/_index.md
+++ b/content/projects/tapestry/_index.md
@@ -18,6 +18,31 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Possible classpath file download through URL manipulation ## { #CVE-2026-61899 }
+
+CVE-2026-61899 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-61899) [\[CVE json\]](./CVE-2026-61899.cve.json) [\[OSV json\]](./CVE-2026-61899.osv.json)
+
+
+
+_Last updated: 2026-08-10T10:36:02.028Z_
+
+### Affected
+
+* Apache Tapestry from 5.5.0 before 5.9.1
+
+
+### Description
+
+Vulnerability in tapestry-core in Apache Tapestry 5.5.0+ on all platforms allows attackers to d<span style="background-color: rgb(255, 255, 255);">ownload clsspath assets</span> via specially crafted URLs.<br>Users are recommended to upgrade to version 5.9.1, which fixes this issue.
+
+### References
+* https://lists.apache.org/thread/6j3yojqrdsxkrfz52d0zjyrf5n9xttmw
+
+
+### Credits
+* Ilyass El Hadi (finder)
+
+
## Apache Tapestry prior to version 4 (EOL) allows RCE though deserialization of untrusted input ## { #CVE-2022-46366 }
CVE-2022-46366 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2022-46366) [\[CVE json\]](./CVE-2022-46366.cve.json) [\[OSV json\]](./CVE-2022-46366.osv.json)
diff --git a/content/projects/zeppelin/_index.md b/content/projects/zeppelin/_index.md
index 7b32e3ef..b483d717 100644
--- a/content/projects/zeppelin/_index.md
+++ b/content/projects/zeppelin/_index.md
@@ -51,7 +51,7 @@ CVE-2026-44616 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-44616) [\[CVE jso
-_Last updated: 2026-07-30T15:21:17.273Z_
+_Last updated: 2026-08-06T10:08:34.789Z_
### Affected
diff --git a/static/projects/answer/CVE-2026-48834.cve.json b/static/projects/answer/CVE-2026-48834.cve.json
new file mode 100644
index 00000000..bdf4a838
--- /dev/null
+++ b/static/projects/answer/CVE-2026-48834.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Denial of service via crafted Accept-Language header parsing",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "cweId": "CWE-400",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Answer",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nUnauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Unauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/0yg5smwnbrhqs55m5h61gn42mcs8s95p",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "tonghuaroot",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-48834",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-48834.osv.json b/static/projects/answer/CVE-2026-48834.osv.json
new file mode 100644
index 00000000..52533a53
--- /dev/null
+++ b/static/projects/answer/CVE-2026-48834.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-48834", "summary": "Denial of service via crafted Accept-Language header parsing", "details": "Improper Handling of Length Parameter Inconsistency vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nUnauthenticated attackers can cause a denial of service via a specially crafted Accept-Language header that triggers excessive CPU consumption during parsing.\nUsers are recommended to upgrade to version 2.0.2, whi [...]
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-48911.cve.json b/static/projects/answer/CVE-2026-48911.cve.json
new file mode 100644
index 00000000..42b2dca5
--- /dev/null
+++ b/static/projects/answer/CVE-2026-48911.cve.json
@@ -0,0 +1,94 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-306 Missing Authentication for Critical Function",
+ "lang": "en",
+ "cweId": "CWE-306",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Answer",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Insufficient Verification of Data Authenticity vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nA missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confirmation link.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Insufficient Verification of Data Authenticity vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>A missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confirmation link.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/mrlwtdnhqqgfbchjgq6rffkz67o8wyv8",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "tonghuaroot",
+ "type": "reporter"
+ },
+ {
+ "lang": "en",
+ "value": "yangxi",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-48911",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-48911.osv.json b/static/projects/answer/CVE-2026-48911.osv.json
new file mode 100644
index 00000000..01a071f6
--- /dev/null
+++ b/static/projects/answer/CVE-2026-48911.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-48911", "summary": "Unauthenticated OAuth Email-Binding Account Takeover via Existing User Confirmation Flow", "details": "Insufficient Verification of Data Authenticity vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nA missing authorization check in the external-login email binding flow allows unauthenticated attackers to take over arbitrary user accounts by tricking victims into clicking a crafted confir [...]
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-48912.cve.json b/static/projects/answer/CVE-2026-48912.cve.json
new file mode 100644
index 00000000..54c5326d
--- /dev/null
+++ b/static/projects/answer/CVE-2026-48912.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-639 Authorization Bypass Through User-Controlled Key",
+ "lang": "en",
+ "cweId": "CWE-639",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Answer",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Input Validation vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\n A missing ownership check in the avatar-cleanup logic allows any authenticated user to delete other users' uploaded files by supplying their file URLs.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Input Validation vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p> A missing ownership check in the avatar-cleanup logic allows any authenticated user to delete other users' uploaded files by supplying their file URLs.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/b9jnttmspd9kp4vgbvb32dcqb4201flq",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "tonghuaroot",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-48912",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-48912.osv.json b/static/projects/answer/CVE-2026-48912.osv.json
new file mode 100644
index 00000000..f663c974
--- /dev/null
+++ b/static/projects/answer/CVE-2026-48912.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-48912", "summary": "Improper authorization in avatar update cleanup allows authenticated users to delete arbitrary uploaded files by URL", "details": "Improper Input Validation vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\n A missing ownership check in the avatar-cleanup logic allows any authenticated user to delete other users' uploaded files by supplying their file URLs.\nUsers are recommended to upgra [...]
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-50749.cve.json b/static/projects/answer/CVE-2026-50749.cve.json
new file mode 100644
index 00000000..ab60c929
--- /dev/null
+++ b/static/projects/answer/CVE-2026-50749.cve.json
@@ -0,0 +1,104 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Missing authorization in revision audit reject allows authenticated users to reject pending revisions",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-863 Incorrect Authorization",
+ "lang": "en",
+ "cweId": "CWE-863",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Answer",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Authorization vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAny authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Authorization vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Any authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/ogk461yr4w9o95k15bkjxk2kpbkrbnln",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "tonghuaroot",
+ "type": "reporter"
+ },
+ {
+ "lang": "en",
+ "value": "Mattia Campanelli",
+ "type": "reporter"
+ },
+ {
+ "lang": "en",
+ "value": "Cavan Loughran",
+ "type": "reporter"
+ },
+ {
+ "lang": "en",
+ "value": "Xi Yang",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-50749",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-50749.osv.json b/static/projects/answer/CVE-2026-50749.osv.json
new file mode 100644
index 00000000..36014094
--- /dev/null
+++ b/static/projects/answer/CVE-2026-50749.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-50749", "summary": "Missing authorization in revision audit reject allows authenticated users to reject pending revisions", "details": "Improper Authorization vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAny authenticated user can reject arbitrary pending edit-revisions without review permission due to a missing authorization check on the reject operation.\nUsers are recommended to upgrade to version 2. [...]
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-60023.cve.json b/static/projects/answer/CVE-2026-60023.cve.json
new file mode 100644
index 00000000..0a812c02
--- /dev/null
+++ b/static/projects/answer/CVE-2026-60023.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unauthorized disclosure of deleted or pending answer content",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
+ "lang": "en",
+ "cweId": "CWE-200",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Answer",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nDeleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Deleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/rq3ygd0j9cchkbmh99dqf8624s7r8y49",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "yangxi",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-60023",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-60023.osv.json b/static/projects/answer/CVE-2026-60023.osv.json
new file mode 100644
index 00000000..018191c1
--- /dev/null
+++ b/static/projects/answer/CVE-2026-60023.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-60023", "summary": "Unauthorized disclosure of deleted or pending answer content", "details": "Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nDeleted or pending answers could be retrieved by unauthorized users through the single-answer read path when the parent question remained visible, exposing answer content that should not have been accessible [...]
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-60053.cve.json b/static/projects/answer/CVE-2026-60053.cve.json
new file mode 100644
index 00000000..d2ed004a
--- /dev/null
+++ b/static/projects/answer/CVE-2026-60053.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Residual Administrative API Key Access After Role or Account Revocation",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-613 Insufficient Session Expiration",
+ "lang": "en",
+ "cweId": "CWE-613",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Answer",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Insufficient Session Expiration vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAdministrative API keys remained usable after the owning administrator was demoted or the account was marked inactive, suspended, or deleted, allowing continued access until the keys were explicitly removed.\nUsers are recommended to upgrade to version 2.0.2, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Insufficient Session Expiration vulnerability in Apache Answer.</p><p>This issue affects Apache Answer: through 2.0.1.</p>Administrative API keys remained usable after the owning administrator was demoted or the account was marked inactive, suspended, or deleted, allowing continued access until the keys were explicitly removed.<br><p>Users are recommended to upgrade to version 2.0.2, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/2vkcj3bdvso6cywnklt2vtkc2m4o0b5c",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "yangxi",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-60053",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/answer/CVE-2026-60053.osv.json b/static/projects/answer/CVE-2026-60053.osv.json
new file mode 100644
index 00000000..82842885
--- /dev/null
+++ b/static/projects/answer/CVE-2026-60053.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-60053", "summary": "Residual Administrative API Key Access After Role or Account Revocation", "details": "Insufficient Session Expiration vulnerability in Apache Answer.\n\nThis issue affects Apache Answer: through 2.0.1.\n\nAdministrative API keys remained usable after the owning administrator was demoted or the account was marked inactive, suspended, or deleted, allowing continued access until the keys were explicitly removed.\nUsers are reco [...]
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2025-49506.cve.json b/static/projects/apr/CVE-2025-49506.cve.json
new file mode 100644
index 00000000..524a70e8
--- /dev/null
+++ b/static/projects/apr/CVE-2025-49506.cve.json
@@ -0,0 +1,107 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "apr_password_validate() vulnerable to timing attack",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-208 Observable Timing Discrepancy",
+ "lang": "en",
+ "cweId": "CWE-208",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Portable Runtime Utility",
+ "packageName": "APR-util",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.2.0",
+ "lessThanOrEqual": "1.6.3",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt() such as\u00a0\u00a0Windows, BeOS, NetWare, or Android.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt() such as <span style=\"background-color: rgb(255, 255, 255);\"> Windows, BeOS, NetWare, or Android.</span></div><div>Users are recommended to upgrade to version 1.6.4, which fixes this issue.<br></div><d [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/2v8o3bj9pb7lfcr57bdnjg9xfkj04mg5",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2024-06-03T00:00:00.000Z",
+ "lang": "en",
+ "value": "Reported to security team"
+ },
+ {
+ "time": "2026-08-06T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 1.6.x by r1936805"
+ },
+ {
+ "time": "2026-08-06T12:58:00.000Z",
+ "lang": "en",
+ "value": "1.6.4 released"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Michael Rowley <michael csirt.global>",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2025-49506",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2025-49506.osv.json b/static/projects/apr/CVE-2025-49506.osv.json
new file mode 100644
index 00000000..054f9a3f
--- /dev/null
+++ b/static/projects/apr/CVE-2025-49506.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2025-49506", "summary": "apr_password_validate() vulnerable to timing attack", "details": "APR-util versions 1.6.3 (and earlier) function apr_password_validate() was not constant-time with regards to hashes or passwords comparisons, potentially leaking their content via a side channel timing attack particularly on platforms without crypt() such as Windows, BeOS, NetWare, or Android.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes [...]
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-32327.cve.json b/static/projects/apr/CVE-2026-32327.cve.json
new file mode 100644
index 00000000..67016dc2
--- /dev/null
+++ b/static/projects/apr/CVE-2026-32327.cve.json
@@ -0,0 +1,112 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "apr-util XML stack recursion crash",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-674 Uncontrolled Recursion",
+ "lang": "en",
+ "cweId": "CWE-674",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Portable Runtime Utility",
+ "packageName": "APR-util",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.6.3",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the\u00a0apr_xml_quote_elem() function.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function.<br><br>Users are recommended to upgrade to version 1.6.4, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/hq27vj8yfno9tkwv0fpj6jksfzgxvth1",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-03-07T07:11:00.000Z",
+ "lang": "en",
+ "value": "Report received"
+ },
+ {
+ "time": "2026-08-06T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 1.6.x by r1936815"
+ },
+ {
+ "time": "2026-08-06T12:58:00.000Z",
+ "lang": "en",
+ "value": "1.6.4 released"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Younghyo Cho @ CISLab, SeoulTech",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "4ra1n, pyn3rd and unam4",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-32327",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-32327.osv.json b/static/projects/apr/CVE-2026-32327.osv.json
new file mode 100644
index 00000000..9e8d4ee2
--- /dev/null
+++ b/static/projects/apr/CVE-2026-32327.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-32327", "summary": "apr-util XML stack recursion crash", "details": "A bug in APR-util version 1.6.3 (and earlier) allows a stack recursion attack against any library consumer which parses XML from untrusted sources and uses the apr_xml_quote_elem() function.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "re [...]
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-34191.cve.json b/static/projects/apr/CVE-2026-34191.cve.json
new file mode 100644
index 00000000..77cba1ad
--- /dev/null
+++ b/static/projects/apr/CVE-2026-34191.cve.json
@@ -0,0 +1,106 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "SQL Injection in apr_dbd_oracle",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
+ "lang": "en",
+ "cweId": "CWE-89",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Portable Runtime Utility",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.6.0",
+ "lessThanOrEqual": "1.6.3",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.</p><p>This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3<br></p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/8xch90zogywwpo5wnsf4o088mkxy4qtf",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-03-24T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ },
+ {
+ "time": "2026-08-06T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 1.6.x by r1936817"
+ },
+ {
+ "time": "2026-08-06T12:58:00.000Z",
+ "lang": "en",
+ "value": "1.6.4 released"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Elhanan Haenel",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-34191",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-34191.osv.json b/static/projects/apr/CVE-2026-34191.osv.json
new file mode 100644
index 00000000..9d9849d6
--- /dev/null
+++ b/static/projects/apr/CVE-2026-34191.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-34191", "summary": "SQL Injection in apr_dbd_oracle", "details": "Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Apache Portable Runtime Utility via apr_dbd_oracle provider.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "1.6.0"}, {"last_affected": "1.6.0"}]}]}], "references": [{"type": [...]
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-34501.cve.json b/static/projects/apr/CVE-2026-34501.cve.json
new file mode 100644
index 00000000..d7bbdec8
--- /dev/null
+++ b/static/projects/apr/CVE-2026-34501.cve.json
@@ -0,0 +1,101 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Heap buffer overflow in APR redis client",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-122 Heap-based Buffer Overflow",
+ "lang": "en",
+ "cweId": "CWE-122",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Portable Runtime Utility",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.6.0",
+ "lessThanOrEqual": "1.6.3",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.</p><p>This issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.</p><p>Users are recommended to upgrade to version 1.6.4, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/o8h6c7cq86fplxlnry6c3rn9x0ovq8mv",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-03-27T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ },
+ {
+ "time": "2026-08-06T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 1.6.x by r1936810"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Elhanan Haenel",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-34501",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-34501.osv.json b/static/projects/apr/CVE-2026-34501.osv.json
new file mode 100644
index 00000000..0706e931
--- /dev/null
+++ b/static/projects/apr/CVE-2026-34501.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-34501", "summary": "Heap buffer overflow in APR redis client", "details": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility redis client.\n\nThis issue affects Apache Portable Runtime Utility: from 1.6.0 through 1.6.3.\n\nUsers are recommended to upgrade to version 1.6.4, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "1.6.0"}, {"last_affected": "1.6.0"}]}]}], "reference [...]
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-34502.cve.json b/static/projects/apr/CVE-2026-34502.cve.json
new file mode 100644
index 00000000..e7f8e749
--- /dev/null
+++ b/static/projects/apr/CVE-2026-34502.cve.json
@@ -0,0 +1,106 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Heap buffer overflow in APR memcached client",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-122 Heap-based Buffer Overflow",
+ "lang": "en",
+ "cweId": "CWE-122",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Portable Runtime Utility",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.3.0",
+ "lessThanOrEqual": "1.6.3",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client\n\nThis issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client</p><p>This issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.<br></p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/spk5643m4vq0mb8h5b9hz9gkp57ombl8",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-03-27T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ },
+ {
+ "time": "2026-08-06T12:00:00.000Z",
+ "lang": "en",
+ "value": "fixed in 1.6.x by r1936813"
+ },
+ {
+ "time": "2026-08-06T12:58:00.000Z",
+ "lang": "en",
+ "value": "1.6.4 released"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Elhanan Haenel",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-34502",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/apr/CVE-2026-34502.osv.json b/static/projects/apr/CVE-2026-34502.osv.json
new file mode 100644
index 00000000..ae2cada0
--- /dev/null
+++ b/static/projects/apr/CVE-2026-34502.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-34502", "summary": "Heap buffer overflow in APR memcached client", "details": "Heap-based Buffer Overflow vulnerability in Apache Portable Runtime Utility memcached client\n\nThis issue affects Apache Portable Runtime Utility: from 1.3.0 through 1.6.3.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "1.3.0"}, {"last_affected": "1.3.0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/spk5643m4 [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-54225.cve.json b/static/projects/cxf/CVE-2026-54225.cve.json
new file mode 100644
index 00000000..80faf431
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-54225.cve.json
@@ -0,0 +1,96 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Denial of Service attack via large attachments",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-core",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache CXF allows to control the maximum attachment size via the\u00a0\"attachment-max-size\". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which fixes this problem by imposing a default attachment size limit of 50mb.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache CXF allows to control the maximum attachment size via the \"attachment-max-size\". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which fixes this problem by imposing a default attachment size limit of 50mb."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/h2bjqm6g58z0j6893qzh728kdtk1byfy",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-54225",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-54225.osv.json b/static/projects/cxf/CVE-2026-54225.osv.json
new file mode 100644
index 00000000..6aaf7da8
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-54225.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-54225", "summary": "Denial of Service attack via large attachments", "details": "Apache CXF allows to control the maximum attachment size via the \"attachment-max-size\". Prior to Apache CXF 4.2.3 and 4.1.8 and 3.6.12, there was no default placed on this size, meaning that a denial of service attack is possible if the user doesn't explicitly set the limit. Users should update to Apache CXF 4.2.3 or 4.1.8 or 3.6.12 which fixes this problem by im [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-57817.cve.json b/static/projects/cxf/CVE-2026-57817.cve.json
new file mode 100644
index 00000000..bbb66aff
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-57817.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper Input Validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-sso-oidc",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow.\u00a0If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider (IdP) that omits the `c_hash`, the RP becomes vulnerable to Authorization Code Substitution/Injection attacks.\u00a0Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider (IdP) that omits the `c_hash`, the RP becomes vulnerable to Authorization Code Substitution/Injection attacks. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/pj63c3pf7kkp1xhr53do704fwj3t3htn",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability.",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-57817",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-57817.osv.json b/static/projects/cxf/CVE-2026-57817.osv.json
new file mode 100644
index 00000000..764cf011
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-57817.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-57817", "summary": "The authorization code hash (c_hash) is not enforced for the hybrid OIDC flow", "details": "The OpenID Connect Core 1.0 specification mandates that the RP MUST validate the `c_hash` parameter when operating in the Hybrid Flow. If an Apache CXF RP is integrated with a non-compliant or misconfigured Identity Provider (IdP) that omits the `c_hash`, the RP becomes vulnerable to Authorization Code Substitution/Injection attacks. [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-57818.cve.json b/static/projects/cxf/CVE-2026-57818.cve.json
new file mode 100644
index 00000000..1e987843
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-57818.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition",
+ "lang": "en",
+ "cweId": "CWE-367",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-oauth2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.<br>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/7q08mz8bcbosp25wok7gr537zlp15mfz",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-57818",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-57818.osv.json b/static/projects/cxf/CVE-2026-57818.osv.json
new file mode 100644
index 00000000..586e3a95
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-57818.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-57818", "summary": "OAuth2 Authorization Code Replay via TOCTOU in JCacheCodeDataProvider", "details": "A race condition in JCacheCodeDataProvider allows an attacker to redeem a single authorization code multiple times via concurrent requests, resulting in the issuance of multiple distinct, valid access tokens. Users are recommended to upgrade to versions 4.2.3, 4.1.8 or 3.6.12, which fix this issue.", "affected": [{"ranges": [{"type": "SEMVER" [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-57819.cve.json b/static/projects/cxf/CVE-2026-57819.cve.json
new file mode 100644
index 00000000..6bae13d1
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-57819.cve.json
@@ -0,0 +1,96 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "No default restriction on the amount of form parameters per message",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "cweId": "CWE-400",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-frontend-jaxrs",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the \"maxFormParameterCount\" configuration option. However, no default limit is set which may lead to denial of service attacks when processing\u00a0 requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the \"maxFormParameterCount\" configuration option. However, no default limit is set which may lead to denial of service attacks when processing requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue by using a default limit of 500 parameters."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/2n14mk01bjc3lrsyhzrkwy8h86289mov",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-57819",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-57819.osv.json b/static/projects/cxf/CVE-2026-57819.osv.json
new file mode 100644
index 00000000..941bea5a
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-57819.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-57819", "summary": "No default restriction on the amount of form parameters per message", "details": "Apache CXF allows to set a limit on the number of form parameters in a JAX-RS message via the \"maxFormParameterCount\" configuration option. However, no default limit is set which may lead to denial of service attacks when processing requests with very large numbers of form parameters. Users are recommended to upgrade to versions 4.2.3 or 4.1 [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-61466.cve.json b/static/projects/cxf/CVE-2026-61466.cve.json
new file mode 100644
index 00000000..9eb3007d
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-61466.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "OAuth2 Dynamic Client Registration Scope Self-Escalation",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-304 Missing Critical Step in Authentication",
+ "lang": "en",
+ "cweId": "CWE-304",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-oauth2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This could lead to a client self-assigning privileged scopes at registration time. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This could lead to a client self-assigning privileged scopes at registration time. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/2l1r16g79tpxd7fzrzr2q9oscwrjgljs",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability.",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-61466",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-61466.osv.json b/static/projects/cxf/CVE-2026-61466.osv.json
new file mode 100644
index 00000000..a97af366
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-61466.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-61466", "summary": "OAuth2 Dynamic Client Registration Scope Self-Escalation", "details": "In Apache CXF's OAuth2 Dynamic Client Registration endpoint, the authorization server accepts and stores the `scope` value supplied in the client registration request verbatim, without validating it against an AS-defined allowlist. This could lead to a client self-assigning privileged scopes at registration time. Users are recommended to upgrade to versio [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-63687.cve.json b/static/projects/cxf/CVE-2026-63687.cve.json
new file mode 100644
index 00000000..9995b159
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-63687.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-345 Insufficient Verification of Data Authenticity",
+ "lang": "en",
+ "cweId": "CWE-345",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-oauth2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that can produce a validly-signed request JWT (e.g., one whose client_secret is known or compromised) can thereby substitute the code_challenge, code_challenge_method, nonce, and state values that were set in the outer HTTP request, undermining PKCE integrity and OpenID Connect replay protection. U [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that can produce a validly-signed request JWT (e.g., one whose client_secret is known or compromised) can thereby substitute the code_challenge, code_challenge_method, nonce, and state values that were set in the outer HTTP request, undermining PKCE integrity and OpenID Connect replay protectio [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/drcq4chmt0btx86f17o47j17r378hzpw",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability.",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-63687",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-63687.osv.json b/static/projects/cxf/CVE-2026-63687.osv.json
new file mode 100644
index 00000000..ce70f5f1
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-63687.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-63687", "summary": "JwtRequestCodeFilter silently overrides outer PKCE and nonce parameters", "details": "Apache CXF's JwtRequestCodeFilter copies all claims from a signed request JWT into the authorization parameter map without excluding security-sensitive parameters. A client that can produce a validly-signed request JWT (e.g., one whose client_secret is known or compromised) can thereby substitute the code_challenge, code_challenge_method, n [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-64958.cve.json b/static/projects/cxf/CVE-2026-64958.cve.json
new file mode 100644
index 00000000..3002599b
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-64958.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Denial of service via message header attachments",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "cweId": "CWE-400",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-core",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An incomplete fix for\u00a0CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/trsnkxc2f21585zlt819blvchgl6oykb",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Markus Vogl, RISE GmbH",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-64958",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-64958.osv.json b/static/projects/cxf/CVE-2026-64958.osv.json
new file mode 100644
index 00000000..7b81b635
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-64958.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-64958", "summary": "Denial of service via message header attachments", "details": "An incomplete fix for CVE-2026-50645 means that it is still possible to perform a denial of service attack on Apache CXF by sending a message with many attachment headers. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "4.2.0"}, {"fixed": "4.2.3"} [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-65432.cve.json b/static/projects/cxf/CVE-2026-65432.cve.json
new file mode 100644
index 00000000..447da12c
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-65432.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "XXE via WSDL/XSD import parsing",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-611 Improper Restriction of XML External Entity Reference",
+ "lang": "en",
+ "cweId": "CWE-611",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-wsdl",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache CXF reads a top-level WSDL through its hardened StaxUtils\u00a0path, which disables XML DTDs and external entities. However, any <wsdl:import>\u00a0or <xsd:import>\u00a0referenced from that top-level WSDL is handed off to WSDL4J, which does not\u00a0disable DOCTYPE declarations or external entities. As a result, the protections applied to the top-level document do not extend to imported documents, leaving imported WSDL/XSD content vulnerable to XML External Ent [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<span style=\"background-color: rgb(253, 253, 252);\">Apache CXF reads a top-level WSDL through its hardened </span><code>StaxUtils</code><span style=\"background-color: rgb(253, 253, 252);\"> path, which disables XML DTDs and external entities. However, any </span><code><wsdl:import></code><span style=\"background-color: rgb(253, 253, 252);\"> or </span><code><xsd:import></code><span style=\"background-color: rgb(253, 253, 252);\"> refe [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/5qs207krzg51jl3zs3cvnl5lt9njp8c3",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Reported by n0mi1k",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-65432",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-65432.osv.json b/static/projects/cxf/CVE-2026-65432.osv.json
new file mode 100644
index 00000000..25dcb242
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-65432.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-65432", "summary": "XXE via WSDL/XSD import parsing", "details": "Apache CXF reads a top-level WSDL through its hardened StaxUtils path, which disables XML DTDs and external entities. However, any <wsdl:import> or <xsd:import> referenced from that top-level WSDL is handed off to WSDL4J, which does not disable DOCTYPE declarations or external entities. As a result, the protections applied to the top-level document do not extend to imported docum [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-65583.cve.json b/static/projects/cxf/CVE-2026-65583.cve.json
new file mode 100644
index 00000000..91533081
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-65583.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Self-issued ID token claims validation skipped",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-345 Insufficient Verification of Data Authenticity",
+ "lang": "en",
+ "cweId": "CWE-345",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-sso-oidc",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache CXF\u2019s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache CXF\u2019s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/fzj8yzgfl53gclxrcdrnrx3grcpkq51j",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability.",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-65583",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-65583.osv.json b/static/projects/cxf/CVE-2026-65583.osv.json
new file mode 100644
index 00000000..35b4453b
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-65583.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-65583", "summary": "Self-issued ID token claims validation skipped", "details": "Apache CXF’s OIDC relying-party token validation could accept self-issued ID tokens without enforcing required claim checks (issuer/subject/audience/time and sub_jwk binding), enabling authentication bypass with crafted tokens. However, note that self-issued ID tokens are not accepted by default in the validator. Users are recommended to upgrade to versions 4.2.3 o [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-66909.cve.json b/static/projects/cxf/CVE-2026-66909.cve.json
new file mode 100644
index 00000000..7219d121
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-66909.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unsafe deserialization of inbound JMS ObjectMessage",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-502 Deserialization of Untrusted Data",
+ "lang": "en",
+ "cweId": "CWE-502",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-transports-jms",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage\u00a0using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or, if a suitable gadget class is on the classpath, remote code execution. The fix disables ObjectMessage\u00a0deserialization by default, with a configuration switch to re- [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<span style=\"background-color: rgb(252, 252, 251);\">Apache CXF's JMS transport deserializes the body of any inbound </span><code>JMS ObjectMessage</code><span style=\"background-color: rgb(252, 252, 251);\"> using native Java deserialization, with no type restrictions in place. An</span><span style=\"background-color: rgb(252, 252, 251);\">y attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading t [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/lr5d4tg6tf7j29jmw8wt242oowonjqpx",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Reported by n0mi1k",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66909",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-66909.osv.json b/static/projects/cxf/CVE-2026-66909.osv.json
new file mode 100644
index 00000000..9bbb3ef5
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-66909.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66909", "summary": "Unsafe deserialization of inbound JMS ObjectMessage", "details": "Apache CXF's JMS transport deserializes the body of any inbound JMS ObjectMessage using native Java deserialization, with no type restrictions in place. Any attacker able to place a message on the service's JMS destination can submit a malicious serialized object, leading to denial of service or, if a suitable gadget class is on the classpath, remote code exec [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-68079.cve.json b/static/projects/cxf/CVE-2026-68079.cve.json
new file mode 100644
index 00000000..eecc390a
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-68079.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "DefaultEncryptingCodeDataProvider allows unlimited authorization code replay",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-294 Authentication Bypass by Capture-replay",
+ "lang": "en",
+ "cweId": "CWE-294",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-oauth2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "In Apache CXF's DefaultEncryptingCodeDataProvider,\u00a0a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the\u00a0removeCodeGrant functionality. This violates the RFC requirement that\u00a0\"The authorization code MUST NOT be used more than once.\" Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that \"The authorization code MUST NOT be used more than once.\" Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/6m06gdqz4rxhy9g90qz9lyqx2gqmf13o",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68079",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-68079.osv.json b/static/projects/cxf/CVE-2026-68079.osv.json
new file mode 100644
index 00000000..f2069675
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-68079.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68079", "summary": "DefaultEncryptingCodeDataProvider allows unlimited authorization code replay", "details": "In Apache CXF's DefaultEncryptingCodeDataProvider, a captured authorization code can be redeemed an unlimited number of times due to a flaw in the implementation of the removeCodeGrant functionality. This violates the RFC requirement that \"The authorization code MUST NOT be used more than once.\" Users are recommended to upgrade to ve [...]
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-68481.cve.json b/static/projects/cxf/CVE-2026-68481.cve.json
new file mode 100644
index 00000000..e5abed7d
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-68481.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Revocation bypass in DefaultEncryptingOAuthDataProvider",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-672 Operation on a Resource after Expiration or Release",
+ "lang": "en",
+ "cweId": "CWE-672",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache CXF",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.cxf:cxf-rt-rs-security-oauth2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.2.0",
+ "lessThan": "4.2.3",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.1.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "3.6.12",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The authorization server MUST invalidate the token.' and 'introspection of a revoked token MUST return {\"active\":false}'. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The authorization server MUST invalidate the token.' and 'introspection of a revoked token MUST return {\"active\":false}'. Users are recommended to upgrade to versions 4.2.3 or 4.1.8 or 3.6.12, which fix this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/88c0h10yjb2b8201o1km3st71fs2zw2b",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Guanping Zhang reported this vulnerability",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68481",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/cxf/CVE-2026-68481.osv.json b/static/projects/cxf/CVE-2026-68481.osv.json
new file mode 100644
index 00000000..d884c3ff
--- /dev/null
+++ b/static/projects/cxf/CVE-2026-68481.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68481", "summary": "Revocation bypass in DefaultEncryptingOAuthDataProvider", "details": "In Apache CXF's DefaultEncryptingOAuthDataProvider, revoked access tokens still decrypt successfully, and TokenIntrospectionService reports active:true. The same applies to refresh tokens. This violates the RFC stipulations that 'The authorization server MUST invalidate the token.' and 'introspection of a revoked token MUST return {\"active\":false}'. User [...]
\ No newline at end of file
diff --git a/static/projects/fory/CVE-2026-71558.cve.json b/static/projects/fory/CVE-2026-71558.cve.json
new file mode 100644
index 00000000..7343ec05
--- /dev/null
+++ b/static/projects/fory/CVE-2026-71558.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Heap type confusion in C++ polymorphic smart-pointer deserialization",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-502 Deserialization of Untrusted Data",
+ "lang": "en",
+ "cweId": "CWE-502",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Fory",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0.14.0",
+ "lessThan": "1.5.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Heap type confusion vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserialization, causing an object of an incompatible type to be treated as the declared base type. This may result in undefined behavior and potentially lead to denial of service or arbitrary code execution.\n\n\nUsers are recommended [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Heap type confusion vulnerability in Apache Fory C++ deserialization.<br><br>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserialization, causing an object of an incompatible type to be treated as the declared base type. This may result in undefined behavior and potentially lead to denial of service or arbitrary code execution.</p>\n<p>Users a [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/oywndv60jwqdv6j37t7bc1qbcc4b235r",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Zhixi \"Jace Sun\", independent security researcher",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-71558",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/fory/CVE-2026-71558.osv.json b/static/projects/fory/CVE-2026-71558.osv.json
new file mode 100644
index 00000000..09ae61cb
--- /dev/null
+++ b/static/projects/fory/CVE-2026-71558.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-71558", "summary": "Heap type confusion in C++ polymorphic smart-pointer deserialization", "details": "Heap type confusion vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0. A crafted input payload can bypass type compatibility checks during polymorphic smart-pointer deserialization, causing an object of an incompatible type to be treated as the declared base type. This may [...]
\ No newline at end of file
diff --git a/static/projects/fory/CVE-2026-71559.cve.json b/static/projects/fory/CVE-2026-71559.cve.json
new file mode 100644
index 00000000..6c917de2
--- /dev/null
+++ b/static/projects/fory/CVE-2026-71559.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-502 Deserialization of Untrusted Data",
+ "lang": "en",
+ "cweId": "CWE-502",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Fory",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0.16.0",
+ "lessThan": "1.5.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.\n\nThis issue affects Apache Fory: from 0.16.0 before 1.5.0.\u00a0 Users of other language implementations are not affected.\n\nUsers are recommended to upgrade to version 1.5.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.</p><p>This issue affects Apache Fory: from 0.16.0 before 1.5.0. Users of other language implementations are not affected.</p><p>Users are recommended to upgrade to version 1.5.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/f28bw002p32yt723rvv3dcwdkljys8r3",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Zhixi \"Jace Sun\", independent security researcher",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-71559",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/fory/CVE-2026-71559.osv.json b/static/projects/fory/CVE-2026-71559.osv.json
new file mode 100644
index 00000000..375bc2ce
--- /dev/null
+++ b/static/projects/fory/CVE-2026-71559.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-71559", "summary": "Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata", "details": "Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic.\n\nThis issue affects Apache Fory: from 0.16.0 before 1.5.0. Users of other language implementations ar [...]
\ No newline at end of file
diff --git a/static/projects/fory/CVE-2026-71560.cve.json b/static/projects/fory/CVE-2026-71560.cve.json
new file mode 100644
index 00000000..65d48cdf
--- /dev/null
+++ b/static/projects/fory/CVE-2026-71560.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-502 Deserialization of Untrusted Data",
+ "lang": "en",
+ "cweId": "CWE-502",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Fory",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0.14.0",
+ "lessThan": "1.5.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.\n\n\nUsers are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue. Applications [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.<br><br>This issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information disclosure or denial of service.</p>\n<p>Users are recommended to upgrade to Apache Fory 1.5.0, which fixes this issue [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/xl2g544kctbgozccnj35qts43p452y5x",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Zhixi \"Jace Sun\", independent security researcher",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-71560",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/fory/CVE-2026-71560.osv.json b/static/projects/fory/CVE-2026-71560.osv.json
new file mode 100644
index 00000000..c47f1a1b
--- /dev/null
+++ b/static/projects/fory/CVE-2026-71560.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-71560", "summary": "Out-of-bounds heap read in C++ struct deserializer tagged-int fast-path", "details": "Out-of-bounds Read vulnerability in Apache Fory C++ deserialization.\n\nThis issue affects Apache Fory C++ versions from 0.14.0 before 1.5.0 when deserializing structs containing tagged integer fields. A crafted input payload may trigger an out-of-bounds heap read in the tagged integer fast-path deserializer, potentially causing information [...]
\ No newline at end of file
diff --git a/static/projects/iotdb/CVE-2026-44630.cve.json b/static/projects/iotdb/CVE-2026-44630.cve.json
new file mode 100644
index 00000000..4edd8e33
--- /dev/null
+++ b/static/projects/iotdb/CVE-2026-44630.cve.json
@@ -0,0 +1,98 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "RPC service denial of service via unchecked Thrift string length",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-789 Memory Allocation with Excessive Size Value",
+ "lang": "en",
+ "cweId": "CWE-789",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-400 Uncontrolled Resource Consumption",
+ "lang": "en",
+ "cweId": "CWE-400",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "INTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache IoTDB",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "1.3.8",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "2.0.0",
+ "lessThan": "2.0.10",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.\n\nUsers are recommended to upgrade to version 2.0.10, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.<br></p><p>This issue affects Apache IoTDB: before 1.3.8, from 2.0.0 before 2.0.9.</p><p>Users are recommended to upgrade to version 2.0.10, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/tfsgd9whbq79lgjvdzj44hw0fhsofly8",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-44630",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/iotdb/CVE-2026-44630.osv.json b/static/projects/iotdb/CVE-2026-44630.osv.json
new file mode 100644
index 00000000..22a7edd0
--- /dev/null
+++ b/static/projects/iotdb/CVE-2026-44630.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-44630", "summary": "RPC service denial of service via unchecked Thrift string length", "details": "Improper validation of length fields in the Apache IoTDB RPC service may allow a remote unauthenticated attacker to cause a denial of service. By sending a crafted malformed Thrift frame, an attacker can cause IoTDB to allocate an excessive amount of memory and crash with an OutOfMemoryError.\n\n\nThis issue affects Apache IoTDB: before 1.3.8, fro [...]
\ No newline at end of file
diff --git a/static/projects/jena/CVE-2026-61372.cve.json b/static/projects/jena/CVE-2026-61372.cve.json
new file mode 100644
index 00000000..70bc844b
--- /dev/null
+++ b/static/projects/jena/CVE-2026-61372.cve.json
@@ -0,0 +1,82 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Web requests using SPARQL Update can escape file restrictions",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')",
+ "lang": "en",
+ "cweId": "CWE-22",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "INTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Jena Fuseki",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "6.1.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki.\n\nThis issue affects Apache Jena Fuseki: through 6.1.0.\n\nUsers are recommended to upgrade to version 6.2.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki.</p><p>This issue affects Apache Jena Fuseki: through 6.1.0.</p><p>Users are recommended to upgrade to version 6.2.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/h206tpxtbzts7m254og6ffqljjdjkm84",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-61372",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/jena/CVE-2026-61372.osv.json b/static/projects/jena/CVE-2026-61372.osv.json
new file mode 100644
index 00000000..1c389595
--- /dev/null
+++ b/static/projects/jena/CVE-2026-61372.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-61372", "summary": "Web requests using SPARQL Update can escape file restrictions", "details": "Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Jena Fuseki.\n\nThis issue affects Apache Jena Fuseki: through 6.1.0.\n\nUsers are recommended to upgrade to version 6.2.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]} [...]
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61483.cve.json b/static/projects/lucy/CVE-2026-61483.cve.json
new file mode 100644
index 00000000..ec7b9b86
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61483.cve.json
@@ -0,0 +1,88 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-674 Uncontrolled Recursion",
+ "lang": "en",
+ "cweId": "CWE-674",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Lucy",
+ "collectionURL": "https://cpan.org/modules",
+ "packageName": "Lucy",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "*",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected",
+ "packageURL": "pkg:cpan/Lucy"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/ltp8320c0nsy45bpzm8342jd7yj05z1h",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "tags": [
+ "unsupported-when-assigned"
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-61483",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61483.osv.json b/static/projects/lucy/CVE-2026-61483.osv.json
new file mode 100644
index 00000000..b30c12ef
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61483.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-61483", "summary": "QueryParser unbounded recursion on deeply-nested query -> C-stack-overflow DoS", "details": "** UNSUPPORTED WHEN ASSIGNED ** Uncontrolled Recursion vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This [...]
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61484.cve.json b/static/projects/lucy/CVE-2026-61484.cve.json
new file mode 100644
index 00000000..d6ce8dc6
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61484.cve.json
@@ -0,0 +1,88 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-502 Deserialization of Untrusted Data",
+ "lang": "en",
+ "cweId": "CWE-502",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Lucy",
+ "collectionURL": "https://cpan.org/modules",
+ "packageName": "Lucy",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThan": "*",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected",
+ "packageURL": "pkg:cpan/Lucy"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/942t3pwgz2nrhnklrtyt5zr7g4wqc9cb",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "critical"
+ }
+ }
+ }
+ ],
+ "tags": [
+ "unsupported-when-assigned"
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-61484",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61484.osv.json b/static/projects/lucy/CVE-2026-61484.osv.json
new file mode 100644
index 00000000..ffc0cd83
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61484.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-61484", "summary": "LucyX::Remote::SearchServer unauthenticated remote Storable::thaw -> RCE/DoS", "details": "** UNSUPPORTED WHEN ASSIGNED ** Deserialization of Untrusted Data vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nN [...]
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61485.cve.json b/static/projects/lucy/CVE-2026-61485.cve.json
new file mode 100644
index 00000000..e22aa595
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61485.cve.json
@@ -0,0 +1,88 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Freezer/InStream deserialization bomb - unbounded allocation reading an index",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-789 Memory Allocation with Excessive Size Value",
+ "lang": "en",
+ "cweId": "CWE-789",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Lucy",
+ "collectionURL": "https://cpan.org/modules",
+ "packageName": "Lucy",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "*",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected",
+ "packageURL": "pkg:cpan/Lucy"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/4q9rfscp3tkjr3kt7lsg97szhmydl23s",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "tags": [
+ "unsupported-when-assigned"
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-61485",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61485.osv.json b/static/projects/lucy/CVE-2026-61485.osv.json
new file mode 100644
index 00000000..d17725fc
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61485.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-61485", "summary": "Freezer/InStream deserialization bomb - unbounded allocation reading an index", "details": "** UNSUPPORTED WHEN ASSIGNED ** Memory Allocation with Excessive Size Value vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted [...]
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61486.cve.json b/static/projects/lucy/CVE-2026-61486.cve.json
new file mode 100644
index 00000000..5d522e1f
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61486.cve.json
@@ -0,0 +1,88 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "stack-buffer-overflow in JSON parser error reporter on malformed input",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-121 Stack-based Buffer Overflow",
+ "lang": "en",
+ "cweId": "CWE-121",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Lucy",
+ "collectionURL": "https://cpan.org/modules",
+ "packageName": "Lucy",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "*",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected",
+ "packageURL": "pkg:cpan/Lucy"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vulnerability only affects products that are no longer supported by the maintainer.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.</p><p>This issue affects Apache Lucy: all versions.</p><p>As this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.</p><p>NOTE: This vulnerability only affects products that are no longer supported by the maintainer.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/z88yv1z19ppsd4td4nqtg7q72fvqh01b",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "tags": [
+ "unsupported-when-assigned"
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-61486",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/lucy/CVE-2026-61486.osv.json b/static/projects/lucy/CVE-2026-61486.osv.json
new file mode 100644
index 00000000..d065438f
--- /dev/null
+++ b/static/projects/lucy/CVE-2026-61486.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-61486", "summary": "stack-buffer-overflow in JSON parser error reporter on malformed input", "details": "** UNSUPPORTED WHEN ASSIGNED ** Stack-based Buffer Overflow vulnerability in Apache Lucy.\n\nThis issue affects Apache Lucy: all versions.\n\nAs this project is retired, we do not plan to release a version that fixes this issue. Users are recommended to find an alternative or restrict access to the instance to trusted users.\n\nNOTE: This vu [...]
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-62354.cve.json b/static/projects/nifi/CVE-2026-62354.cve.json
new file mode 100644
index 00000000..fad81ad2
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-62354.cve.json
@@ -0,0 +1,132 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Incorrect Authorization for Parameter Context Validation Requests",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-863 Incorrect Authorization",
+ "lang": "en",
+ "cweId": "CWE-863",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "NIFI-16112"
+ ],
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache NiFi",
+ "packageName": "org.apache.nifi:nifi-web-api",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.10.0",
+ "lessThanOrEqual": "2.10.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation methods with alternative settings. Apache NiFi installations that do not implement different levels of authorization for viewing and modifying Parameter Context configuration [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation methods with alternative settings. Apache NiFi installations that do not implement different levels of authorization for viewing and modifying Parameter Context configurat [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/l17xcnnf1rm7qljmypyjxmh62cx4o4wj",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "format": "CVSS",
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ],
+ "cvssV4_0": {
+ "version": "4.0",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "PRESENT",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "HIGH",
+ "subConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "HIGH",
+ "subIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "HIGH",
+ "subAvailabilityImpact": "NONE",
+ "Safety": "PRESENT",
+ "Automatable": "YES",
+ "Recovery": "IRRECOVERABLE",
+ "valueDensity": "CONCENTRATED",
+ "vulnerabilityResponseEffort": "LOW",
+ "providerUrgency": "AMBER",
+ "baseSeverity": "HIGH",
+ "baseScore": 7.7,
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:I/V:C/RE:L/U:Amber"
+ }
+ },
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "High"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-07-08T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Nguyen Van Hiep from MBBank",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-62354",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-62354.osv.json b/static/projects/nifi/CVE-2026-62354.osv.json
new file mode 100644
index 00000000..aeccaada
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-62354.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-62354", "summary": "Incorrect Authorization for Parameter Context Validation Requests", "details": "Authorization handling for Parameter Context validation requests in Apache NiFi 1.10.0 through 2.10.0 allows clients with read access to submit proposed Parameter values. The proposed values override current configuration, enabling users with read access to invoke predefined component validation methods with alternative settings. Apache NiFi inst [...]
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-68979.cve.json b/static/projects/nifi/CVE-2026-68979.cve.json
new file mode 100644
index 00000000..5949eaea
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-68979.cve.json
@@ -0,0 +1,131 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Missing Authorization for Components Referenced by Parameter Context Updates",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-862 Missing Authorization",
+ "lang": "en",
+ "cweId": "CWE-862",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "NIFI-16148"
+ ],
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache NiFi",
+ "packageName": "org.apache.nifi:nifi-web-api",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.10.0",
+ "lessThanOrEqual": "2.10.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache NiFi 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization was limited to read and write privileges on the Parameter Context itself. As a result of the missing authorization, an authenticated user authorized to modify a Parameter Contex [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache NiFi 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization was limited to read and write privileges on the Parameter Context itself. As a result of the missing authorization, an authenticated user authorized to modify a Parameter Co [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/xwz8wsss2ovx07tns96rkc3n7cm4xfrq",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "format": "CVSS",
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ],
+ "cvssV4_0": {
+ "version": "4.0",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "PRESENT",
+ "privilegesRequired": "HIGH",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "subConfidentialityImpact": "LOW",
+ "vulnIntegrityImpact": "HIGH",
+ "subIntegrityImpact": "LOW",
+ "vulnAvailabilityImpact": "LOW",
+ "subAvailabilityImpact": "LOW",
+ "Safety": "NEGLIGIBLE",
+ "Automatable": "YES",
+ "Recovery": "USER",
+ "valueDensity": "CONCENTRATED",
+ "vulnerabilityResponseEffort": "LOW",
+ "providerUrgency": "CLEAR",
+ "baseSeverity": "MEDIUM",
+ "baseScore": 5.9,
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:L/SA:L/S:N/AU:Y/R:U/V:C/RE:L/U:Clear"
+ }
+ },
+ {
+ "other": {
+ "content": {
+ "text": "Medium"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-07-22T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "D0HY30N",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68979",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-68979.osv.json b/static/projects/nifi/CVE-2026-68979.osv.json
new file mode 100644
index 00000000..64ecaef4
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-68979.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68979", "summary": "Missing Authorization for Components Referenced by Parameter Context Updates", "details": "Apache NiFi 1.10.0 through 2.10.0 provide a Parameter Context update REST API method that does not enforce authorization checking on components referencing Parameter values. Updating a Parameter Context can change parameter values that affect referencing components, but framework authorization was limited to read and write privileges o [...]
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-68980.cve.json b/static/projects/nifi/CVE-2026-68980.cve.json
new file mode 100644
index 00000000..ec082d0d
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-68980.cve.json
@@ -0,0 +1,132 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Authorization Bypass for Parameter Context Asset Deletion",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-863 Incorrect Authorization",
+ "lang": "en",
+ "cweId": "CWE-863",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "NIFI-16154"
+ ],
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache NiFi",
+ "packageName": "org.apache.nifi:nifi-web-api",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "2.0.0",
+ "lessThanOrEqual": "2.10.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework performed authorized based on the supplied Parameter Context Identifier without verifying the requested Identifier against the stored Identifier. Apache NiFi installations th [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework performed authorized based on the supplied Parameter Context Identifier without verifying the requested Identifier against the stored Identifier. Apache NiFi installation [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/yo8k6tt3zxjm49zzhly3453v0xhwm3o1",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "format": "CVSS",
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ],
+ "cvssV4_0": {
+ "version": "4.0",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "PRESENT",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "LOW",
+ "subIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "LOW",
+ "subAvailabilityImpact": "NONE",
+ "Safety": "NEGLIGIBLE",
+ "Automatable": "YES",
+ "Recovery": "USER",
+ "valueDensity": "CONCENTRATED",
+ "vulnerabilityResponseEffort": "LOW",
+ "providerUrgency": "CLEAR",
+ "baseSeverity": "LOW",
+ "baseScore": 2.3,
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/S:N/AU:Y/R:U/V:C/RE:L/U:Clear"
+ }
+ },
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "Low"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-07-27T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "mak3bread (Minseong Kim)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68980",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-68980.osv.json b/static/projects/nifi/CVE-2026-68980.osv.json
new file mode 100644
index 00000000..327e3a63
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-68980.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68980", "summary": "Authorization Bypass for Parameter Context Asset Deletion", "details": "Apache NiFi 2.0.0 through 2.10.0 support creating, reading, and deleting Assets associated with Parameter Contexts through the REST API. The framework authorizes asset deletion against the owning Parameter Context using the supplied Parameter Context Identifier and Asset Identifier. The framework performed authorized based on the supplied Parameter Conte [...]
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-68981.cve.json b/static/projects/nifi/CVE-2026-68981.cve.json
new file mode 100644
index 00000000..db52013d
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-68981.cve.json
@@ -0,0 +1,132 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Uncontrolled Resource Consumption through Decompression of HTTP Requests",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-409 Improper Handling of Highly Compressed Data (Data Amplification)",
+ "lang": "en",
+ "cweId": "CWE-409",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "NIFI-16152"
+ ],
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache NiFi",
+ "packageName": "org.apache.nifi:nifi-web-api",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "1.5.0",
+ "lessThanOrEqual": "2.10.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compression to Jetty Server and [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts of memory. Upgrading to Apache NiFi 2.11.0 is the recommended mitigation, which relocates response compression to Jetty Server [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/vxrqn7poyf1wx6gdy7c0dxqfqkctjngg",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "format": "CVSS",
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ],
+ "cvssV4_0": {
+ "version": "4.0",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "NONE",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "LOW",
+ "subIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "HIGH",
+ "subAvailabilityImpact": "NONE",
+ "Safety": "PRESENT",
+ "Automatable": "YES",
+ "Recovery": "USER",
+ "valueDensity": "CONCENTRATED",
+ "vulnerabilityResponseEffort": "MODERATE",
+ "providerUrgency": "AMBER",
+ "baseSeverity": "HIGH",
+ "baseScore": 8.8,
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:H/SC:N/SI:N/SA:N/S:P/AU:Y/R:U/V:C/RE:M/U:Amber"
+ }
+ },
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "High"
+ }
+ }
+ }
+ ],
+ "timeline": [
+ {
+ "time": "2026-07-28T12:00:00.000Z",
+ "lang": "en",
+ "value": "reported"
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "mak3bread (Minseong Kim)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68981",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/nifi/CVE-2026-68981.osv.json b/static/projects/nifi/CVE-2026-68981.osv.json
new file mode 100644
index 00000000..f5437321
--- /dev/null
+++ b/static/projects/nifi/CVE-2026-68981.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68981", "summary": "Uncontrolled Resource Consumption through Decompression of HTTP Requests", "details": "Apache NiFi 1.5.0 through 2.10.0 support gzip-encoded HTTP requests for the application REST API using a Jersey encoding filter. The framework enforced a configurable maximum request size on the compressed payload rather than the decompressed output, allowing a malicious client to send crafted requests that could consume excessive amounts [...]
\ No newline at end of file
diff --git a/static/projects/polaris/CVE-2026-64640.cve.json b/static/projects/polaris/CVE-2026-64640.cve.json
new file mode 100644
index 00000000..61717201
--- /dev/null
+++ b/static/projects/polaris/CVE-2026-64640.cve.json
@@ -0,0 +1,122 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "register endpoint reads attacker-controlled storage location before allowed-locations validation",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-863 Incorrect Authorization",
+ "lang": "en",
+ "cweId": "CWE-863",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Polaris",
+ "packageName": "org.apache.polaris:polaris-runtime-service",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.6.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Apache Polaris did not consistently validate storage locations supplied during table and view registration.\n\nAn authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials to read a caller-selected Iceberg metadata file before verifying that the file was within the catalog's allowed storage locations.\n\nIf the catalog's underlying credentia [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Apache Polaris did not consistently validate storage locations supplied during table and view registration.<br><br><div>An authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials to read a caller-selected Iceberg metadata file before verifying that the file was within the catalog's allowed storage locations.</div><div>If the catalog's [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/scd8p9wy8b9j3om5wohbotpfycnmmjl4",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ },
+ {
+ "format": "CVSS",
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ],
+ "cvssV4_0": {
+ "version": "4.0",
+ "attackVector": "NETWORK",
+ "attackComplexity": "LOW",
+ "attackRequirements": "NONE",
+ "privilegesRequired": "LOW",
+ "userInteraction": "NONE",
+ "vulnConfidentialityImpact": "LOW",
+ "subConfidentialityImpact": "NONE",
+ "vulnIntegrityImpact": "NONE",
+ "subIntegrityImpact": "NONE",
+ "vulnAvailabilityImpact": "NONE",
+ "subAvailabilityImpact": "NONE",
+ "Safety": "NEGLIGIBLE",
+ "Automatable": "NOT_DEFINED",
+ "Recovery": "NOT_DEFINED",
+ "valueDensity": "NOT_DEFINED",
+ "vulnerabilityResponseEffort": "NOT_DEFINED",
+ "providerUrgency": "CLEAR",
+ "baseSeverity": "MEDIUM",
+ "baseScore": 5.3,
+ "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/U:Clear"
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-64640",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/polaris/CVE-2026-64640.osv.json b/static/projects/polaris/CVE-2026-64640.osv.json
new file mode 100644
index 00000000..054768a0
--- /dev/null
+++ b/static/projects/polaris/CVE-2026-64640.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-64640", "summary": "register endpoint reads attacker-controlled storage location before allowed-locations validation", "details": "Apache Polaris did not consistently validate storage locations supplied during table and view registration.\n\nAn authenticated principal with permission to register a table or view could, depending on the affected release and registration path, cause Polaris to use the catalog's storage credentials to read a caller [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66257.cve.json b/static/projects/qpid/CVE-2026-66257.cve.json
new file mode 100644
index 00000000..de0c141e
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66257.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:proton-j",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "0.34.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/dnczt6bgfcq2x6q8ljco177h1qmv59fm",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66257",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66257.osv.json b/static/projects/qpid/CVE-2026-66257.osv.json
new file mode 100644
index 00000000..8675e615
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66257.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66257", "summary": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion", "details": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{" [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66273.cve.json b/static/projects/qpid/CVE-2026-66273.cve.json
new file mode 100644
index 00000000..75cbbfa9
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66273.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Type size/count handling can lead to excessive allocation pre-authentication",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-789 Memory Allocation with Excessive Size Value",
+ "lang": "en",
+ "cweId": "CWE-789",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:proton-j",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "0.34.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/z34s9v5w05qk4qqtz5fs3v9wpxz6fnbh",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66273",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66273.osv.json b/static/projects/qpid/CVE-2026-66273.osv.json
new file mode 100644
index 00000000..5c84b147
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66273.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66273", "summary": "Type size/count handling can lead to excessive allocation pre-authentication", "details": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{" [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66274.cve.json b/static/projects/qpid/CVE-2026-66274.cve.json
new file mode 100644
index 00000000..b6ebac50
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66274.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded type nesting can lead to pre-authentication stackoverflow",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-674 Uncontrolled Recursion",
+ "lang": "en",
+ "cweId": "CWE-674",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:proton-j",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "0.34.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/h7xolzws2by2qhdjf7scbx87foxojb5h",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66274",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66274.osv.json b/static/projects/qpid/CVE-2026-66274.osv.json
new file mode 100644
index 00000000..c3899c60
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66274.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66274", "summary": "Unbounded type nesting can lead to pre-authentication stackoverflow", "details": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66275.cve.json b/static/projects/qpid/CVE-2026-66275.cve.json
new file mode 100644
index 00000000..96af8786
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66275.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Incoming session flow control window can be exceeded",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:proton-j",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "0.34.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/jds59nxrgcxtlx7xl0kvl5hqt07thxzt",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66275",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66275.osv.json b/static/projects/qpid/CVE-2026-66275.osv.json
new file mode 100644
index 00000000..153fd019
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66275.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66275", "summary": "Incoming session flow control window can be exceeded", "details": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}] [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66276.cve.json b/static/projects/qpid/CVE-2026-66276.cve.json
new file mode 100644
index 00000000..0273d1bc
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66276.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded disposition range handling can lead to denial of service",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-606 Unchecked Input for Loop Condition",
+ "lang": "en",
+ "cweId": "CWE-606",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:proton-j",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "0.34.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.</div><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/14nj0lpsqpnd3q0hw0t0tw44qvdo1jc2",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66276",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66276.osv.json b/static/projects/qpid/CVE-2026-66276.osv.json
new file mode 100644
index 00000000..ab721129
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66276.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66276", "summary": "Unbounded disposition range handling can lead to denial of service", "details": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "affected": [{"ranges": [{"type": " [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66277.cve.json b/static/projects/qpid/CVE-2026-66277.cve.json
new file mode 100644
index 00000000..b1232ff4
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66277.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unable to govern the maximum number of transfer frames per incoming delivery",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:proton-j",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "0.34.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</p><p>This issue affects Apache Qpid Proton-J: through 0.34.1.</p><p>Users are recommended to upgrade to version 0.35.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/48tflr3sx0sxq9bcdy5rh06oy3gmwx02",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66277",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-66277.osv.json b/static/projects/qpid/CVE-2026-66277.osv.json
new file mode 100644
index 00000000..0b56c465
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-66277.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66277", "summary": "Unable to govern the maximum number of transfer frames per incoming delivery", "details": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Proton-J: through 0.34.1.\n\nUsers are recommended to upgrade to version 0.35.0, which fixes the issue.", "aff [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67465.cve.json b/static/projects/qpid/CVE-2026-67465.cve.json
new file mode 100644
index 00000000..d3afec93
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67465.cve.json
@@ -0,0 +1,83 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton Dotnet",
+ "packageName": "Apache.Qpid.Proton",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.0.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</p><p>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</p><p>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/zl2pj5fo32lbyrwof89tdyrgt67bbo0m",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67465",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67465.osv.json b/static/projects/qpid/CVE-2026-67465.osv.json
new file mode 100644
index 00000000..be40de27
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67465.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67465", "summary": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion", "details": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67551.cve.json b/static/projects/qpid/CVE-2026-67551.cve.json
new file mode 100644
index 00000000..2edc1d91
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67551.cve.json
@@ -0,0 +1,83 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Type size/count handling can lead to excessive allocation pre-authentication",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-789 Memory Allocation with Excessive Size Value",
+ "lang": "en",
+ "cweId": "CWE-789",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton Dotnet",
+ "packageName": "org.apache.qpid",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.0.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div> pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/o566fhkrr3gg0lyzt24xwvz9w94oo6ro",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67551",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67551.osv.json b/static/projects/qpid/CVE-2026-67551.osv.json
new file mode 100644
index 00000000..4b641812
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67551.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67551", "summary": "Type size/count handling can lead to excessive allocation pre-authentication", "details": "pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{ [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67552.cve.json b/static/projects/qpid/CVE-2026-67552.cve.json
new file mode 100644
index 00000000..e85c9be6
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67552.cve.json
@@ -0,0 +1,83 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded type nesting can lead to pre-authentication stackoverflow",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-674 Uncontrolled Recursion",
+ "lang": "en",
+ "cweId": "CWE-674",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton Dotnet",
+ "packageName": "org.apache.qpid",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.0.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/4dyg0gycrv55ox4oywqght61b053g8xj",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67552",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67552.osv.json b/static/projects/qpid/CVE-2026-67552.osv.json
new file mode 100644
index 00000000..5e990489
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67552.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67552", "summary": "Unbounded type nesting can lead to pre-authentication stackoverflow", "details": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67553.cve.json b/static/projects/qpid/CVE-2026-67553.cve.json
new file mode 100644
index 00000000..39cbfc8a
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67553.cve.json
@@ -0,0 +1,83 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Incoming session flow control window can be exceeded",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton Dotnet",
+ "packageName": "org.apache.qpid",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.0.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/hvsncmcbgjrn85crs909nf4y3dqqrywo",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67553",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67553.osv.json b/static/projects/qpid/CVE-2026-67553.osv.json
new file mode 100644
index 00000000..52278f4a
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67553.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67553", "summary": "Incoming session flow control window can be exceeded", "details": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0 [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67554.cve.json b/static/projects/qpid/CVE-2026-67554.cve.json
new file mode 100644
index 00000000..06de5c50
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67554.cve.json
@@ -0,0 +1,83 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded disposition range handling can lead to denial of service",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-606 Unchecked Input for Loop Condition",
+ "lang": "en",
+ "cweId": "CWE-606",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton Dotnet",
+ "packageName": "org.apache.qpid",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.0.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/5ndlowz29464ytj98gz9z9ljhwnmb2hm",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67554",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67554.osv.json b/static/projects/qpid/CVE-2026-67554.osv.json
new file mode 100644
index 00000000..86882223
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67554.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67554", "summary": "Unbounded disposition range handling can lead to denial of service", "details": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "affected": [{"ranges": [{"type" [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67555.cve.json b/static/projects/qpid/CVE-2026-67555.cve.json
new file mode 100644
index 00000000..37ce49be
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67555.cve.json
@@ -0,0 +1,83 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unable to govern the maximum number of transfer frames per incoming delivery",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Proton Dotnet",
+ "packageName": "org.apache.qpid",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.0.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service</div><div>This issue affects Apache Qpid Proton-Dotnet: through 1.0.0.</div><div>Users are recommended to upgrade to version 1.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/dwrb02dp714lvlfxdj4o5bc9h3z54sw3",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67555",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67555.osv.json b/static/projects/qpid/CVE-2026-67555.osv.json
new file mode 100644
index 00000000..fca0d176
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67555.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67555", "summary": "Unable to govern the maximum number of transfer frames per incoming delivery", "details": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service\n\nThis issue affects Apache Qpid Proton-Dotnet: through 1.0.0.\n\nUsers are recommended to upgrade to version 1.1.0, which fixes the issue.", "a [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67588.cve.json b/static/projects/qpid/CVE-2026-67588.cve.json
new file mode 100644
index 00000000..d29f2a2a
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67588.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid ProtonJ2",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:protonj2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.1.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/vk4j02dzggfdrdkwvzmqo4jro2tgj0jt",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67588",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67588.osv.json b/static/projects/qpid/CVE-2026-67588.osv.json
new file mode 100644
index 00000000..95d6e9ee
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67588.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67588", "summary": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion", "details": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"in [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67589.cve.json b/static/projects/qpid/CVE-2026-67589.cve.json
new file mode 100644
index 00000000..691430ed
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67589.cve.json
@@ -0,0 +1,96 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Type size/count handling can lead to excessive allocation pre-authentication",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-789 Memory Allocation with Excessive Size Value",
+ "lang": "en",
+ "cweId": "CWE-789",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid ProtonJ2",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:protonj2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.1.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/bs24x4778dh72xtfs299cy8krvdlo47q",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Apache Qpid security team",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "xxy010605@gmail.com",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67589",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67589.osv.json b/static/projects/qpid/CVE-2026-67589.osv.json
new file mode 100644
index 00000000..f4222f97
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67589.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67589", "summary": "Type size/count handling can lead to excessive allocation pre-authentication", "details": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"in [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67590.cve.json b/static/projects/qpid/CVE-2026-67590.cve.json
new file mode 100644
index 00000000..cc9d968b
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67590.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded type nesting can lead to pre-authentication stackoverflow",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-674 Uncontrolled Recursion",
+ "lang": "en",
+ "cweId": "CWE-674",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid ProtonJ2",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:protonj2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.1.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/kmov6k7f3moqy01m1s370fl61vgos3ly",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67590",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67590.osv.json b/static/projects/qpid/CVE-2026-67590.osv.json
new file mode 100644
index 00000000..db74dbb6
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67590.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67590", "summary": "Unbounded type nesting can lead to pre-authentication stackoverflow", "details": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {" [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67591.cve.json b/static/projects/qpid/CVE-2026-67591.cve.json
new file mode 100644
index 00000000..c0071e57
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67591.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Incoming session flow control window can be exceeded",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid ProtonJ2",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:protonj2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.1.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/rwmggh2bkm6qotxpdfcplht3jgw5n036",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67591",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67591.osv.json b/static/projects/qpid/CVE-2026-67591.osv.json
new file mode 100644
index 00000000..e60d8e40
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67591.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67591", "summary": "Incoming session flow control window can be exceeded", "details": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}] [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67592.cve.json b/static/projects/qpid/CVE-2026-67592.cve.json
new file mode 100644
index 00000000..28378a4f
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67592.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unable to govern the maximum number of transfer frames per incoming delivery",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid ProtonJ2",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:protonj2",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.1.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</div><div>This issue affects Apache Qpid ProtonJ2: through 1.1.0.</div><div>Users are recommended to upgrade to version 1.2.0, which fixes the issue</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/b4pv9hfdk7ox78pss77sb4nzwjrvqhhz",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-67592",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-67592.osv.json b/static/projects/qpid/CVE-2026-67592.osv.json
new file mode 100644
index 00000000..7d568d8c
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-67592.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-67592", "summary": "Unable to govern the maximum number of transfer frames per incoming delivery", "details": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid ProtonJ2: through 1.1.0.\n\nUsers are recommended to upgrade to version 1.2.0, which fixes the issue", "affect [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68060.cve.json b/static/projects/qpid/CVE-2026-68060.cve.json
new file mode 100644
index 00000000..be9c94ef
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68060.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Type size/count handling can lead to excessive allocation pre-authentication",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/0slvl8h25w3z4opnh08yyn8l3chko5c9",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68060",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68060.osv.json b/static/projects/qpid/CVE-2026-68060.osv.json
new file mode 100644
index 00000000..3e99b6a4
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68060.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68060", "summary": "Type size/count handling can lead to excessive allocation pre-authentication", "details": "A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{" [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68073.cve.json b/static/projects/qpid/CVE-2026-68073.cve.json
new file mode 100644
index 00000000..1da25528
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68073.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded type nesting can lead to pre-authentication stack overflow",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-674 Uncontrolled Recursion",
+ "lang": "en",
+ "cweId": "CWE-674",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/djz1gnrk882vzjo8rykyf9bnywqbvwwr",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68073",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68073.osv.json b/static/projects/qpid/CVE-2026-68073.osv.json
new file mode 100644
index 00000000..7dc25b9e
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68073.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68073", "summary": "Unbounded type nesting can lead to pre-authentication stack overflow", "details": "A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68074.cve.json b/static/projects/qpid/CVE-2026-68074.cve.json
new file mode 100644
index 00000000..e5c49235
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68074.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/9t1pvl36z69ssww6449od5g0tszqnhjs",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68074",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68074.osv.json b/static/projects/qpid/CVE-2026-68074.osv.json
new file mode 100644
index 00000000..7116657e
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68074.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68074", "summary": "Unbounded symbol value caching can lead to pre-authentication resource exhaustion", "details": "A pre-authentication attacker could leverage unbounded symbol value caching to cause resource exhaustion leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{" [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68075.cve.json b/static/projects/qpid/CVE-2026-68075.cve.json
new file mode 100644
index 00000000..b056ceb4
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68075.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Incoming session flow control window can be exceeded",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/lht725jgkowmyyjl039roffg6pyvbxz0",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68075",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68075.osv.json b/static/projects/qpid/CVE-2026-68075.osv.json
new file mode 100644
index 00000000..807a5133
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68075.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68075", "summary": "Incoming session flow control window can be exceeded", "details": "An authenticated attacker could exceed the session flow control incoming window potentially leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}] [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68077.cve.json b/static/projects/qpid/CVE-2026-68077.cve.json
new file mode 100644
index 00000000..5b5f67ed
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68077.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded disposition range handling can lead to denial of service",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-606 Unchecked Input for Loop Condition",
+ "lang": "en",
+ "cweId": "CWE-606",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/gzc78gdrlw2711v8jzgmsto8bqvg28y8",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68077",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68077.osv.json b/static/projects/qpid/CVE-2026-68077.osv.json
new file mode 100644
index 00000000..13bbae14
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68077.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68077", "summary": "Unbounded disposition range handling can lead to denial of service", "details": "An authenticated attacker can craft a disposition frame with large or illegal ranges causing excessive CPU usage due to naive range handling, leading to denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "affected": [{"ranges": [{"type": " [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68078.cve.json b/static/projects/qpid/CVE-2026-68078.cve.json
new file mode 100644
index 00000000..50d24d5c
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68078.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unable to govern the maximum number of transfer frames per incoming delivery",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-770 Allocation of Resources Without Limits or Throttling",
+ "lang": "en",
+ "cweId": "CWE-770",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/m8gs6pfp1fmbgwcjr8zsgn95hfh15f8o",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68078",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68078.osv.json b/static/projects/qpid/CVE-2026-68078.osv.json
new file mode 100644
index 00000000..f5299c4e
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68078.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68078", "summary": "Unable to govern the maximum number of transfer frames per incoming delivery", "details": "It was not possible to govern the maximum number of transfer frames per incoming delivery, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "aff [...]
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68080.cve.json b/static/projects/qpid/CVE-2026-68080.cve.json
new file mode 100644
index 00000000..408c8f95
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68080.cve.json
@@ -0,0 +1,84 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unbounded echo flow responses can lead to denial of service",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-406 Insufficient Control of Network Message Volume (Network Amplification)",
+ "lang": "en",
+ "cweId": "CWE-406",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Qpid Broker-J",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.qpid:qpid-broker-plugins-amqp-1-0-protocol",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "10.0.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<div>It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.</div><div>This issue affects Apache Qpid Broker-J: through 10.0.1.</div><div>Users are recommended to upgrade to version 10.1.0, which fixes the issue.</div>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/tcnrv5nhmnsrzz92o4owxgycro6llt57",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-68080",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/qpid/CVE-2026-68080.osv.json b/static/projects/qpid/CVE-2026-68080.osv.json
new file mode 100644
index 00000000..4516c906
--- /dev/null
+++ b/static/projects/qpid/CVE-2026-68080.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-68080", "summary": "Unbounded echo flow responses can lead to denial of service", "details": "It was not possible to govern the rate at which the broker would respond to an echo flow, enabling an authenticated attacker to cause excessive resource usage and potential denial of service.\n\nThis issue affects Apache Qpid Broker-J: through 10.0.1.\n\nUsers are recommended to upgrade to version 10.1.0, which fixes the issue.", "affected": [{"ranges" [...]
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-28672.cve.json b/static/projects/ranger/CVE-2026-28672.cve.json
new file mode 100644
index 00000000..e7360eaf
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-28672.cve.json
@@ -0,0 +1,90 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "OS Command Injection via Username in UnixUserGroupBuilder",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')",
+ "lang": "en",
+ "cweId": "CWE-77",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "packageName": "org.apache.ranger.unixusersync",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0.6",
+ "lessThanOrEqual": "2.8",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.\n\nThis issue affects Apache Ranger: from 0.6 through 2.8.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.</p><p>This issue affects Apache Ranger: from 0.6 through 2.8.</p><p></p><div><br></div><br><p></p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/99ysjqcmz950o3jgm6pqx1wb696onzq7",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-28672",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-28672.osv.json b/static/projects/ranger/CVE-2026-28672.osv.json
new file mode 100644
index 00000000..88cdc54b
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-28672.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-28672", "summary": "OS Command Injection via Username in UnixUserGroupBuilder", "details": "Improper Neutralization of Special Elements used in a Command ('Command Injection') vulnerability in Apache Ranger.\n\nThis issue affects Apache Ranger: from 0.6 through 2.8.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0.6"}, {"last_affected": "0.6"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread [...]
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-32227.cve.json b/static/projects/ranger/CVE-2026-32227.cve.json
new file mode 100644
index 00000000..f165cd7a
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-32227.cve.json
@@ -0,0 +1,91 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "SQL Injection vulnerability in lookup functionality",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')",
+ "lang": "en",
+ "cweId": "CWE-89",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "collectionURL": "https://github.com/apache/ranger",
+ "packageName": "org.apache.ranger.services",
+ "versions": [
+ {
+ "status": "unknown",
+ "version": "2.0.0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "SQL Injection vulnerability vulnerability in Apache Ranger.\n\nThis issue affects .\n\nUsers are recommended to upgrade to version 2.9.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>SQL Injection vulnerability vulnerability in Apache Ranger.</p><p>This issue affects .</p><p>Users are recommended to upgrade to version 2.9.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/1zltfzd6rp683omrlv1zkxvkwm9d0nd2",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "\u7f57\u946b <lx...@gmail.com>",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-32227",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-40920.cve.json b/static/projects/ranger/CVE-2026-40920.cve.json
new file mode 100644
index 00000000..eca7f7a3
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-40920.cve.json
@@ -0,0 +1,109 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Privilege Escalation via URL Parameter",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-269 Improper Privilege Management",
+ "lang": "en",
+ "cweId": "CWE-269",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper Input Validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-287 Improper Authentication",
+ "lang": "en",
+ "cweId": "CWE-287",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Privilege Escalation via URL Parameter\u00a0is reported in Apache Ranger versions <= 2.8.0.\n\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0.<br><br>Users are recommended to upgrade to version 2.9.0, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/zh92fob9gqp196rvz3x9t0d2fnq9g27d",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrew Rukin (Arenadata)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-40920",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-40920.osv.json b/static/projects/ranger/CVE-2026-40920.osv.json
new file mode 100644
index 00000000..4430d54c
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-40920.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-40920", "summary": "Privilege Escalation via URL Parameter", "details": "Privilege Escalation via URL Parameter is reported in Apache Ranger versions <= 2.8.0.\n\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/zh92fob9gqp196rvz3x9t0d2fnq9g27d"}]}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-42537.cve.json b/static/projects/ranger/CVE-2026-42537.cve.json
new file mode 100644
index 00000000..cc98dfc7
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-42537.cve.json
@@ -0,0 +1,99 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Remote Code Execution via JDBC URL Injection",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
+ "lang": "en",
+ "cweId": "CWE-94",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper Input Validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Remote Code Execution via JDBC URL Injection\u00a0in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<span style=\"background-color: rgb(255, 255, 255);\">Remote Code Execution via JDBC URL Injection</span> in Apache Ranger <= 2.8.0<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/ymwvz8cwv3wm8fq21pnd7fco0l1m4wrp",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrew Rukin (Arenadata)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-42537",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-42537.osv.json b/static/projects/ranger/CVE-2026-42537.osv.json
new file mode 100644
index 00000000..c333a715
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-42537.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-42537", "summary": "Remote Code Execution via JDBC URL Injection", "details": "Remote Code Execution via JDBC URL Injection in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/ymwvz8cwv3wm8fq21pnd7fco0l1m4wrp"}]}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-44416.cve.json b/static/projects/ranger/CVE-2026-44416.cve.json
new file mode 100644
index 00000000..32dc9a04
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-44416.cve.json
@@ -0,0 +1,99 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Remote Code Execution via Arbitrary Class Instantiation",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
+ "lang": "en",
+ "cweId": "CWE-94",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-470 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection')",
+ "lang": "en",
+ "cweId": "CWE-470",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Remote Code Execution via Arbitrary Class Instantiation in\u00a0plugin-schema-registry\u00a0component in Apache Ranger <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<span style=\"background-color: rgb(255, 255, 255);\">Remote Code Execution via Arbitrary Class Instantiation</span> in <span style=\"background-color: rgb(255, 255, 255);\">plugin-schema-registry</span> component in <span style=\"background-color: rgb(255, 255, 255);\">Apache Ranger <= 2.8.0</span>.<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/2gqssqhwkzbpd8jx8q6986cwldr7qkdn",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrew Rukin (Arenadata)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-44416",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-44416.osv.json b/static/projects/ranger/CVE-2026-44416.osv.json
new file mode 100644
index 00000000..79595ec1
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-44416.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-44416", "summary": "Remote Code Execution via Arbitrary Class Instantiation", "details": "Remote Code Execution via Arbitrary Class Instantiation in plugin-schema-registry component in Apache Ranger <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apa [...]
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-55799.cve.json b/static/projects/ranger/CVE-2026-55799.cve.json
new file mode 100644
index 00000000..c5ce3c75
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-55799.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Remote Code Execution Vulnerability in GraalScriptEngineCreator",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
+ "lang": "en",
+ "cweId": "CWE-94",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/mqpdrqrvd47x5vhy03xok4ylbo9wbqgj",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "kippford Q. <k3...@gmail.com>",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-55799",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-55799.osv.json b/static/projects/ranger/CVE-2026-55799.osv.json
new file mode 100644
index 00000000..834893c1
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-55799.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-55799", "summary": "Remote Code Execution Vulnerability in GraalScriptEngineCreator", "details": "Remote Code Execution Vulnerability in GraalScriptEngineCreator in Apache Ranger <= 2.8.0\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/mqpdrq [...]
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-55814.cve.json b/static/projects/ranger/CVE-2026-55814.cve.json
new file mode 100644
index 00000000..050688ce
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-55814.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Download APIs expose plugin data without authentication",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-306 Missing Authentication for Critical Function",
+ "lang": "en",
+ "cweId": "CWE-306",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/yoorhnbxfydb5xoxlxlmms0f268rj9dh",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "low"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrew Rukin (Arenadata)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-55814",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-55814.osv.json b/static/projects/ranger/CVE-2026-55814.osv.json
new file mode 100644
index 00000000..6cad5d2c
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-55814.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-55814", "summary": "Download APIs expose plugin data without authentication", "details": "Missing Authentication in Apache Ranger Download APIs on versions <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.org/thread/yoorhnbxfydb5xoxlxlmms0f268r [...]
\ No newline at end of file
diff --git a/static/projects/ranger/CVE-2026-65942.cve.json b/static/projects/ranger/CVE-2026-65942.cve.json
new file mode 100644
index 00000000..5f85435d
--- /dev/null
+++ b/static/projects/ranger/CVE-2026-65942.cve.json
@@ -0,0 +1,89 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Clients accept TLS certificates issued for other hostnames",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-297 Improper Validation of Certificate with Host Mismatch",
+ "lang": "en",
+ "cweId": "CWE-297",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Ranger",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "2.8.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "TLS hostname verification issue in Apache Ranger Client Code in versions <= 2.8.0.\nUsers are recommended to upgrade to version 2.9.0, which fixes this issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<span style=\"background-color: rgb(255, 255, 255);\">TLS hostname verification issue</span> in Apache Ranger Client Code in versions <= 2.8.0.<br>Users are recommended to upgrade to version 2.9.0, which fixes this issue."
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/pp6on4yyht3z8l0ktfo1xydhjzjbn4gt",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ }
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrew Rukin (Arenadata)",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-65942",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
... 326 lines suppressed ...