You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@security.apache.org by pk...@apache.org on 2026/08/26 10:17:03 UTC
(security-site) branch main updated (1d43c538 -> acbf9e9c)
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/security-site.git
from 1d43c538 Credit binarly research for finding two GH tokens
new 3f73a697 CVE updates from 2026-08-24 through 2026-08-25 (#88)
new acbf9e9c Add security model coordinates for Apache OpenNLP (#89)
The 2 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
content/projects/_index.md | 2 +
content/projects/allura/_index.md | 25 +++
content/projects/camel/_index.md | 225 +++++++++++++++++++++
content/projects/dolphinscheduler/_index.md | 2 +-
content/projects/hive/_index.md | 84 ++++++++
content/projects/logging/_index.md | 2 +-
content/projects/opennlp/_index.md | 7 +-
scripts/project-coordinates.json | 4 +-
.../CVE-2026-75099.cve.json} | 38 ++--
static/projects/allura/CVE-2026-75099.osv.json | 1 +
static/projects/camel/CVE-2026-59230.cve.json | 115 +++++++++++
static/projects/camel/CVE-2026-59230.osv.json | 1 +
static/projects/camel/CVE-2026-60093.cve.json | 120 +++++++++++
static/projects/camel/CVE-2026-60093.osv.json | 1 +
static/projects/camel/CVE-2026-63621.cve.json | 125 ++++++++++++
static/projects/camel/CVE-2026-63621.osv.json | 1 +
static/projects/camel/CVE-2026-66906.cve.json | 120 +++++++++++
static/projects/camel/CVE-2026-66906.osv.json | 1 +
static/projects/camel/CVE-2026-66907.cve.json | 115 +++++++++++
static/projects/camel/CVE-2026-66907.osv.json | 1 +
static/projects/camel/CVE-2026-66908.cve.json | 103 ++++++++++
static/projects/camel/CVE-2026-66908.osv.json | 1 +
static/projects/camel/CVE-2026-71300.cve.json | 115 +++++++++++
static/projects/camel/CVE-2026-71300.osv.json | 1 +
static/projects/camel/CVE-2026-78329.cve.json | 120 +++++++++++
static/projects/camel/CVE-2026-78329.osv.json | 1 +
static/projects/hive/CVE-2026-49845.cve.json | 118 +++++++++++
static/projects/hive/CVE-2026-49845.osv.json | 1 +
static/projects/hive/CVE-2026-53561.cve.json | 138 +++++++++++++
static/projects/hive/CVE-2026-53561.osv.json | 1 +
static/projects/hive/CVE-2026-55976.cve.json | 118 +++++++++++
static/projects/hive/CVE-2026-55976.osv.json | 1 +
32 files changed, 1682 insertions(+), 26 deletions(-)
copy static/projects/{ranger/CVE-2026-42537.cve.json => allura/CVE-2026-75099.cve.json} (60%)
create mode 100644 static/projects/allura/CVE-2026-75099.osv.json
create mode 100644 static/projects/camel/CVE-2026-59230.cve.json
create mode 100644 static/projects/camel/CVE-2026-59230.osv.json
create mode 100644 static/projects/camel/CVE-2026-60093.cve.json
create mode 100644 static/projects/camel/CVE-2026-60093.osv.json
create mode 100644 static/projects/camel/CVE-2026-63621.cve.json
create mode 100644 static/projects/camel/CVE-2026-63621.osv.json
create mode 100644 static/projects/camel/CVE-2026-66906.cve.json
create mode 100644 static/projects/camel/CVE-2026-66906.osv.json
create mode 100644 static/projects/camel/CVE-2026-66907.cve.json
create mode 100644 static/projects/camel/CVE-2026-66907.osv.json
create mode 100644 static/projects/camel/CVE-2026-66908.cve.json
create mode 100644 static/projects/camel/CVE-2026-66908.osv.json
create mode 100644 static/projects/camel/CVE-2026-71300.cve.json
create mode 100644 static/projects/camel/CVE-2026-71300.osv.json
create mode 100644 static/projects/camel/CVE-2026-78329.cve.json
create mode 100644 static/projects/camel/CVE-2026-78329.osv.json
create mode 100644 static/projects/hive/CVE-2026-49845.cve.json
create mode 100644 static/projects/hive/CVE-2026-49845.osv.json
create mode 100644 static/projects/hive/CVE-2026-53561.cve.json
create mode 100644 static/projects/hive/CVE-2026-53561.osv.json
create mode 100644 static/projects/hive/CVE-2026-55976.cve.json
create mode 100644 static/projects/hive/CVE-2026-55976.osv.json
(security-site) 01/02: CVE updates from 2026-08-24 through 2026-08-25 (#88)
Posted by pk...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/security-site.git
commit 3f73a69705bb82ce62255b18f4cb5e3c7d5d9cca
Author: Piotr P. Karwasz <pk...@apache.org>
AuthorDate: Wed Aug 26 12:16:51 2026 +0200
CVE updates from 2026-08-24 through 2026-08-25 (#88)
Assisted-By: Claude Fable 5 <no...@anthropic.com>
---
content/projects/allura/_index.md | 25 +++
content/projects/camel/_index.md | 225 +++++++++++++++++++++++++
content/projects/dolphinscheduler/_index.md | 2 +-
content/projects/hive/_index.md | 84 +++++++++
content/projects/logging/_index.md | 2 +-
static/projects/allura/CVE-2026-75099.cve.json | 95 +++++++++++
static/projects/allura/CVE-2026-75099.osv.json | 1 +
static/projects/camel/CVE-2026-59230.cve.json | 115 +++++++++++++
static/projects/camel/CVE-2026-59230.osv.json | 1 +
static/projects/camel/CVE-2026-60093.cve.json | 120 +++++++++++++
static/projects/camel/CVE-2026-60093.osv.json | 1 +
static/projects/camel/CVE-2026-63621.cve.json | 125 ++++++++++++++
static/projects/camel/CVE-2026-63621.osv.json | 1 +
static/projects/camel/CVE-2026-66906.cve.json | 120 +++++++++++++
static/projects/camel/CVE-2026-66906.osv.json | 1 +
static/projects/camel/CVE-2026-66907.cve.json | 115 +++++++++++++
static/projects/camel/CVE-2026-66907.osv.json | 1 +
static/projects/camel/CVE-2026-66908.cve.json | 103 +++++++++++
static/projects/camel/CVE-2026-66908.osv.json | 1 +
static/projects/camel/CVE-2026-71300.cve.json | 115 +++++++++++++
static/projects/camel/CVE-2026-71300.osv.json | 1 +
static/projects/camel/CVE-2026-78329.cve.json | 120 +++++++++++++
static/projects/camel/CVE-2026-78329.osv.json | 1 +
static/projects/hive/CVE-2026-49845.cve.json | 118 +++++++++++++
static/projects/hive/CVE-2026-49845.osv.json | 1 +
static/projects/hive/CVE-2026-53561.cve.json | 138 +++++++++++++++
static/projects/hive/CVE-2026-53561.osv.json | 1 +
static/projects/hive/CVE-2026-55976.cve.json | 118 +++++++++++++
static/projects/hive/CVE-2026-55976.osv.json | 1 +
29 files changed, 1750 insertions(+), 2 deletions(-)
diff --git a/content/projects/allura/_index.md b/content/projects/allura/_index.md
index cd4a20ec..b00cbbeb 100644
--- a/content/projects/allura/_index.md
+++ b/content/projects/allura/_index.md
@@ -13,6 +13,31 @@ Do you want disclose a potential security issue for Apache Allura? Send your rep
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Unauthenticated REST disclosure ## { #CVE-2026-75099 }
+
+CVE-2026-75099 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-75099) [\[CVE json\]](./CVE-2026-75099.cve.json) [\[OSV json\]](./CVE-2026-75099.osv.json)
+
+
+
+_Last updated: 2026-08-24T16:42:15.529Z_
+
+### Affected
+
+* Apache Allura through 1.19.1
+
+
+### Description
+
+<p><span>Unauthenticated REST disclosure</span> of certain content items in Apache Allura.</p><p>This issue affects Apache Allura: through 1.19.1.</p><p>Users are recommended to upgrade to version 1.20.0, which fixes the issue.</p>
+
+### References
+* https://lists.apache.org/thread/lnsfx58o6mx6m44qk4vzqrq8ccmrywcy
+
+
+### Credits
+* Venkatraman Kumar, securin.io (finder)
+
+
## Git command injection ## { #CVE-2026-73240 }
CVE-2026-73240 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-73240) [\[CVE json\]](./CVE-2026-73240.cve.json) [\[OSV json\]](./CVE-2026-73240.osv.json)
diff --git a/content/projects/camel/_index.md b/content/projects/camel/_index.md
index 043a203e..7730e44d 100644
--- a/content/projects/camel/_index.md
+++ b/content/projects/camel/_index.md
@@ -18,6 +18,231 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes ## { #CVE-2026-78329 }
+
+CVE-2026-78329 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-78329) [\[CVE json\]](./CVE-2026-78329.cve.json) [\[OSV json\]](./CVE-2026-78329.osv.json)
+
+
+
+_Last updated: 2026-08-24T16:22:14.568Z_
+
+### Affected
+
+* Apache Camel from 4.11.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.22.0
+
+
+### Description
+
+<p>Improper input validation vulnerability in Apache Camel Undertow component.</p><p>This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed that instance into the UndertowHttpBinding it creates lazily, overwriting the UndertowHeaderFilterStrategy that DefaultUndertowHttpBinding installs in its own constructor. Unless a [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-78329.html
+
+
+### Credits
+* Andrea Cosentino from Apache Software Foundation (finder)
+* Barak Srour from Apiiro (finder)
+* Andrea Cosentino from Apache Software Foundation (remediation developer)
+
+
+## Camel-Atmosphere-Websocket: WebSocket dispatch header injection ## { #CVE-2026-71300 }
+
+CVE-2026-71300 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-71300) [\[CVE json\]](./CVE-2026-71300.cve.json) [\[OSV json\]](./CVE-2026-71300.osv.json)
+
+
+
+_Last updated: 2026-08-24T16:21:12.809Z_
+
+### Affected
+
+* Apache Camel from 4.0.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.22.0
+
+
+### Description
+
+<p>Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-atmosphere-websocket producer selects which connected WebSocket peers a message is delivered to through Exchange headers, and the string values of those headers sat outside the Camel namespace: websocket.connectionKey and websocket.connectionKey.list, along with web [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-71300.html
+
+
+### Credits
+* Barak Srour from Apiiro (finder)
+* Andrea Cosentino (remediation developer)
+
+
+## Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted ## { #CVE-2026-66908 }
+
+CVE-2026-66908 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66908) [\[CVE json\]](./CVE-2026-66908.cve.json) [\[OSV json\]](./CVE-2026-66908.osv.json)
+
+
+
+_Last updated: 2026-08-24T16:14:14.095Z_
+
+### Affected
+
+* Apache Camel from 4.8.0 before 4.22.0
+
+
+### Description
+
+<p>Improper Authentication vulnerability in Apache Camel Platform HTTP Main component.</p><p>This issue affects Apache Camel: from 4.8.0 before 4.22.0.</p><p>The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT keystore properties. JWTAuthenticationConfigurer.buildJwtOptions returned null when neither jwtIssuer nor jwtAudience was configured, and the caller then skipped the JWTAuthOptions.set [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-66908.html
+
+
+### Credits
+* n0mi1k (finder)
+* Andrea Cosentino (remediation developer)
+
+
+## Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result ## { #CVE-2026-66907 }
+
+CVE-2026-66907 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66907) [\[CVE json\]](./CVE-2026-66907.cve.json) [\[OSV json\]](./CVE-2026-66907.osv.json)
+
+
+
+_Last updated: 2026-08-24T14:07:53.814Z_
+
+### Affected
+
+* Apache Camel from 4.0.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.22.0
+
+
+### Description
+
+<p>Relative path traversal vulnerability in Apache Camel Google Storage component.</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when the downloadFileName option is set. That option is documented as a folder or a filename, and when its value contains no expression token the consumer builds the local destination by [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-66907.html
+
+
+### Credits
+* n0mi1k (finder)
+* Andrea Cosentino (remediation developer)
+
+
+## Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir ## { #CVE-2026-66906 }
+
+CVE-2026-66906 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-66906) [\[CVE json\]](./CVE-2026-66906.cve.json) [\[OSV json\]](./CVE-2026-66906.osv.json)
+
+
+
+_Last updated: 2026-08-24T14:07:23.634Z_
+
+### Affected
+
+* Apache Camel from 4.0.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.22.0
+
+
+### Description
+
+<p>Relative path traversal vulnerability in Apache Camel Azure Storage Blob component.</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem through its downloadBlobToFile operation, writing into the directory named by the fileDir endpoint option, which is documented as usable from both the producer and the consumer. Blob [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-66906.html
+
+
+### Credits
+* Hiep Nguyen (finder)
+* n0mi1k (finder)
+* Andrea Cosentino (remediation developer)
+
+
+## Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy ## { #CVE-2026-63621 }
+
+CVE-2026-63621 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-63621) [\[CVE json\]](./CVE-2026-63621.cve.json) [\[OSV json\]](./CVE-2026-63621.osv.json)
+
+
+
+_Last updated: 2026-08-24T14:06:32.101Z_
+
+### Affected
+
+* Apache Camel from 3.15.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.21.0
+
+
+### Description
+
+<p>Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component</p>The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode the HTTP-header path filters Camel-internal headers through KnativeHttpHeaderFilterStrategy, but in structured content mode (Content-Type application/cloudevents+json) the CloudEvent exten [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-63621.html
+
+
+### Credits
+* Andrea Cosentino (finder)
+* Andrea Cosentino (remediation developer)
+
+
+## Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir ## { #CVE-2026-60093 }
+
+CVE-2026-60093 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-60093) [\[CVE json\]](./CVE-2026-60093.cve.json) [\[OSV json\]](./CVE-2026-60093.osv.json)
+
+
+
+_Last updated: 2026-08-24T14:06:02.406Z_
+
+### Affected
+
+* Apache Camel from 4.0.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.22.0
+
+
+### Description
+
+<p>Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to the local filesystem through its downloadToFile operation, writing into the directory named by the fileDir endpoint option. DataLakeFileOperations.downloadToFile built the local tar [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-60093.html
+
+
+### Credits
+* Hiep Nguyen (finder)
+* n0mi1k (finder)
+* Andrea Cosentino (remediation developer)
+
+
+## Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled ## { #CVE-2026-59230 }
+
+CVE-2026-59230 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-59230) [\[CVE json\]](./CVE-2026-59230.cve.json) [\[OSV json\]](./CVE-2026-59230.osv.json)
+
+
+
+_Last updated: 2026-08-24T16:09:32.233Z_
+
+### Affected
+
+* Apache Camel from 2.17.0 before 4.14.9
+* Apache Camel from 4.15.0 before 4.18.4
+* Apache Camel from 4.19.0 before 4.22.0
+
+
+### Description
+
+<p>Improper input validation vulnerability in Apache Camel.</p><p>This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-mail component ships a MimeMultipart data format that can unmarshal a MIME multipart message. When it is configured with headersInline set to true, the unmarshal path copies the MIME headers of the incoming message onto the Camel message: it enumerates every header that is not one of the three s [...]
+
+### References
+* https://camel.apache.org/security/CVE-2026-59230.html
+
+
+### Credits
+* Atuin - Automated Vulnerability Discovery Engine, anciety of Tencent Xuanwu Lab (finder)
+* Andrea Cosentino (remediation developer)
+
+
## An inbound Camel-namespace filter was added to Sns2HeaderFilterStrategy to align it with sibling components ## { #CVE-2026-56140 }
CVE-2026-56140 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-56140) [\[CVE json\]](./CVE-2026-56140.cve.json) [\[OSV json\]](./CVE-2026-56140.osv.json)
diff --git a/content/projects/dolphinscheduler/_index.md b/content/projects/dolphinscheduler/_index.md
index fd62cca3..5b9305de 100644
--- a/content/projects/dolphinscheduler/_index.md
+++ b/content/projects/dolphinscheduler/_index.md
@@ -24,7 +24,7 @@ CVE-2026-49050 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-49050) [\[CVE jso
-_Last updated: 2026-06-17T01:46:54.058Z_
+_Last updated: 2026-08-25T06:32:16.645Z_
### Affected
diff --git a/content/projects/hive/_index.md b/content/projects/hive/_index.md
index 681c663b..47ca7628 100644
--- a/content/projects/hive/_index.md
+++ b/content/projects/hive/_index.md
@@ -18,6 +18,90 @@ You can read more about the security policy on:
This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
+## SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url ## { #CVE-2026-55976 }
+
+CVE-2026-55976 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-55976) [\[CVE json\]](./CVE-2026-55976.cve.json) [\[OSV json\]](./CVE-2026-55976.osv.json)
+
+
+
+_Last updated: 2026-08-24T19:34:22.629Z_
+
+### Affected
+
+* Apache Hive from 2.1.0 through 4.2.0
+
+
+### Description
+
+<p>Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the <code>avro.schema.url</code> table property on an Avro table that is subsequently queried. This can expose cloud instance metadata, internal network services, or local server files to the Hive process identity. Users are recommended to upgra [...]
+
+### References
+* https://github.com/apache/hive
+* https://issues.apache.org/jira/browse/HIVE-29671
+* https://github.com/apache/hive/commit/45049202df35cea382616624de3fe8d252aa2d00
+* https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05
+
+
+### Credits
+* zhaokaifei (reporter)
+
+
+## Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user ## { #CVE-2026-53561 }
+
+CVE-2026-53561 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-53561) [\[CVE json\]](./CVE-2026-53561.cve.json) [\[OSV json\]](./CVE-2026-53561.osv.json)
+
+
+
+_Last updated: 2026-08-24T19:34:40.993Z_
+
+### Affected
+
+* Apache Hive from 4.0.0 through 4.2.0
+
+
+### Description
+
+An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an unauthenticated network attacker to authenticate as an arbitrary Hive user and obtain an authenticated HiveServer2 session via a forged Authorization: Bearer token sent to the /cliservice HTTP endpoint. Users are recommended to upgrade to 4.2.1 version tha [...]
+
+### References
+* https://github.com/apache/hive
+* https://issues.apache.org/jira/browse/HIVE-29653
+* https://github.com/apache/hive/commit/6ca06ca1104ff7462363087a867d70d546134774
+* https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05
+
+
+### Credits
+* Andrew Rukin (Arenadata) (reporter)
+
+
+## SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths ## { #CVE-2026-49845 }
+
+CVE-2026-49845 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2026-49845) [\[CVE json\]](./CVE-2026-49845.cve.json) [\[OSV json\]](./CVE-2026-49845.osv.json)
+
+
+
+_Last updated: 2026-08-24T19:33:58.098Z_
+
+### Affected
+
+* Apache Hive from 4.0.0 through 4.2.0
+
+
+### Description
+
+<span>SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata (including statistics updates, truncation targets, and file-metadata cache operations) via crafted partition names in metastore RPC requests when direct SQL is enabled (the default). Users are recommended to upgrade to version 4.2.1, which fixes this is [...]
+
+### References
+* https://github.com/apache/hive
+* https://github.com/apache/hive/commit/ca64f08a8e43db9845b47d5fa2e96f7fdea7288e
+* https://issues.apache.org/jira/browse/HIVE-29622
+* https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05
+
+
+### Credits
+* Leon Johnson (reporter)
+
+
## SQL injection vulnerability when processing delete column statistics requests via the HMS Thrift APIs ## { #CVE-2025-62728 }
CVE-2025-62728 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2025-62728) [\[CVE json\]](./CVE-2025-62728.cve.json) [\[OSV json\]](./CVE-2025-62728.osv.json)
diff --git a/content/projects/logging/_index.md b/content/projects/logging/_index.md
index 441c2773..4276c282 100644
--- a/content/projects/logging/_index.md
+++ b/content/projects/logging/_index.md
@@ -272,7 +272,7 @@ CVE-2025-68161 [\[CVE\]](https://cve.org/CVERecord?id=CVE-2025-68161) [\[CVE jso
-_Last updated: 2026-04-10T16:18:30.716Z_
+_Last updated: 2026-08-24T11:29:02.055Z_
### Affected
diff --git a/static/projects/allura/CVE-2026-75099.cve.json b/static/projects/allura/CVE-2026-75099.cve.json
new file mode 100644
index 00000000..65c1d79f
--- /dev/null
+++ b/static/projects/allura/CVE-2026-75099.cve.json
@@ -0,0 +1,95 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unauthenticated REST disclosure",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-200 Exposure of Sensitive Information to an Unauthorized Actor",
+ "lang": "en",
+ "cweId": "CWE-200",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Allura",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "0",
+ "lessThanOrEqual": "1.19.1",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Unauthenticated REST disclosure\u00a0of certain content items in Apache Allura.\n\n\n\nThis issue affects Apache Allura: through 1.19.1.\n\n\n\nUsers are recommended to upgrade to version 1.20.0, which fixes the issue.",
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p><span>Unauthenticated REST disclosure</span> of certain content items in Apache Allura.</p><p>This issue affects Apache Allura: through 1.19.1.</p><p>Users are recommended to upgrade to version 1.20.0, which fixes the issue.</p>"
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://lists.apache.org/thread/lnsfx58o6mx6m44qk4vzqrq8ccmrywcy",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Venkatraman Kumar, securin.io",
+ "type": "finder"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-75099",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/allura/CVE-2026-75099.osv.json b/static/projects/allura/CVE-2026-75099.osv.json
new file mode 100644
index 00000000..de680279
--- /dev/null
+++ b/static/projects/allura/CVE-2026-75099.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-75099", "summary": "Unauthenticated REST disclosure", "details": "Unauthenticated REST disclosure of certain content items in Apache Allura.\n\n\n\nThis issue affects Apache Allura: through 1.19.1.\n\n\n\nUsers are recommended to upgrade to version 1.20.0, which fixes the issue.", "affected": [{"ranges": [{"type": "SEMVER", "events": [{"introduced": "0"}, {"last_affected": "0"}]}]}], "references": [{"type": "WEB", "url": "https://lists.apache.o [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-59230.cve.json b/static/projects/camel/CVE-2026-59230.cve.json
new file mode 100644
index 00000000..fb867aab
--- /dev/null
+++ b/static/projects/camel/CVE-2026-59230.cve.json
@@ -0,0 +1,115 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper input validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-mail",
+ "packageURL": "pkg:maven/org.apache.camel/camel-mail",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "2.17.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper input validation vulnerability in Apache Camel.\n\n\n\nThis issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-mail component ships a MimeMultipart data format that can unmarshal a MIME multipart message. When it is configured with headersInline set to true, the unmarshal path copies the MIME headers of the incoming message onto the Camel message: it enumerates every header that is not [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper input validation vulnerability in Apache Camel.</p><p>This issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-mail component ships a MimeMultipart data format that can unmarshal a MIME multipart message. When it is configured with headersInline set to true, the unmarshal path copies the MIME headers of the incoming message onto the Camel message: it enumerates every header that i [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-59230.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual severity rating",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Atuin - Automated Vulnerability Discovery Engine, anciety of Tencent Xuanwu Lab",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 1.0.3"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-59230",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.2"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-59230.osv.json b/static/projects/camel/CVE-2026-59230.osv.json
new file mode 100644
index 00000000..669e1504
--- /dev/null
+++ b/static/projects/camel/CVE-2026-59230.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-59230", "summary": "Camel-Mail: the MimeMultipart data format copied MIME headers onto the Camel message without a header filter strategy when unmarshalling with headersInline enabled", "details": "Improper input validation vulnerability in Apache Camel.\n\n\n\nThis issue affects Apache Camel: from 2.17.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-mail component ships a MimeMultipart data format that c [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-60093.cve.json b/static/projects/camel/CVE-2026-60093.cve.json
new file mode 100644
index 00000000..34c163d5
--- /dev/null
+++ b/static/projects/camel/CVE-2026-60093.cve.json
@@ -0,0 +1,120 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-23 Relative path traversal",
+ "lang": "en",
+ "cweId": "CWE-23",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-azure-storage-datalake",
+ "packageURL": "pkg:maven/org.apache.camel/camel-azure-storage-datalake",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to the local filesystem through its downloadToFile operation, writing into the directory named by the fileDir endpoint option. DataLakeFileOperations.downloadToFile [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-azure-storage-datalake component can download an Azure Data Lake Storage Gen2 file to the local filesystem through its downloadToFile operation, writing into the directory named by the fileDir endpoint option. DataLakeFileOperations.downloadTo [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-60093.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Hiep Nguyen",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "n0mi1k",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-60093",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-60093.osv.json b/static/projects/camel/CVE-2026-60093.osv.json
new file mode 100644
index 00000000..075b2319
--- /dev/null
+++ b/static/projects/camel/CVE-2026-60093.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-60093", "summary": "Camel-Azure-Storage-DataLake: the downloadToFile operation built the local download target from the remote path name without constraining it to the configured fileDir", "details": "Relative path traversal vulnerability in Apache Camel Azure-Storage Datalake component\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-azure-storage-datalake [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-63621.cve.json b/static/projects/camel/CVE-2026-63621.cve.json
new file mode 100644
index 00000000..0da54ec4
--- /dev/null
+++ b/static/projects/camel/CVE-2026-63621.cve.json
@@ -0,0 +1,125 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper Input Validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')",
+ "lang": "en",
+ "cweId": "CWE-74",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-knative",
+ "packageURL": "pkg:maven/org.apache.camel/camel-knative",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "3.15.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.21.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component\n\nThe Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode the HTTP-header path filters Camel-internal headers through KnativeHttpHeaderFilterStrategy, but in structured content mode (Content-Type application/cloudevents+json) the [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component</p>The Knative consumer in camel-knative maps inbound CloudEvent attributes onto Camel message headers. In binary content mode the HTTP-header path filters Camel-internal headers through KnativeHttpHeaderFilterStrategy, but in structured content mode (Content-Type application/cloudevents+js [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-63621.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-63621",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-63621.osv.json b/static/projects/camel/CVE-2026-63621.osv.json
new file mode 100644
index 00000000..13f9ec6a
--- /dev/null
+++ b/static/projects/camel/CVE-2026-63621.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-63621", "summary": "Camel-Knative: CloudEvent extension fields received in structured content mode were mapped onto message headers without applying any header filter strategy", "details": "Improper Input Validation, Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') vulnerability in Apache Camel Knative component\n\nThe Knative consumer in camel-knative maps inbound CloudEvent attributes onto Cam [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-66906.cve.json b/static/projects/camel/CVE-2026-66906.cve.json
new file mode 100644
index 00000000..c19e6912
--- /dev/null
+++ b/static/projects/camel/CVE-2026-66906.cve.json
@@ -0,0 +1,120 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-23 Relative path traversal",
+ "lang": "en",
+ "cweId": "CWE-23",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-azure-storage-blob",
+ "packageURL": "pkg:maven/org.apache.camel/camel-azure-storage-blob",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Relative path traversal vulnerability in Apache Camel Azure Storage Blob component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem through its downloadBlobToFile operation, writing into the directory named by the fileDir endpoint option, which is documented as usable from both the producer and [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Relative path traversal vulnerability in Apache Camel Azure Storage Blob component.</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-azure-storage-blob component can download an Azure Storage blob to the local filesystem through its downloadBlobToFile operation, writing into the directory named by the fileDir endpoint option, which is documented as usable from both the produce [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-66906.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Hiep Nguyen",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "n0mi1k",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66906",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-66906.osv.json b/static/projects/camel/CVE-2026-66906.osv.json
new file mode 100644
index 00000000..443d4957
--- /dev/null
+++ b/static/projects/camel/CVE-2026-66906.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66906", "summary": "Camel-Azure-Storage-Blob: the downloadBlobToFile operation built the local download target from the remote blob name without constraining it to the configured fileDir", "details": "Relative path traversal vulnerability in Apache Camel Azure Storage Blob component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-azure-storage-blob compone [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-66907.cve.json b/static/projects/camel/CVE-2026-66907.cve.json
new file mode 100644
index 00000000..790506da
--- /dev/null
+++ b/static/projects/camel/CVE-2026-66907.cve.json
@@ -0,0 +1,115 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-23 Relative path traversal",
+ "lang": "en",
+ "cweId": "CWE-23",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-google-storage",
+ "packageURL": "pkg:maven/org.apache.camel/camel-google-storage",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Relative path traversal vulnerability in Apache Camel Google Storage component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when the downloadFileName option is set. That option is documented as a folder or a filename, and when its value contains no expression token the consumer builds the lo [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Relative path traversal vulnerability in Apache Camel Google Storage component.</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-google-storage consumer downloads Google Cloud Storage objects to the local filesystem when the downloadFileName option is set. That option is documented as a folder or a filename, and when its value contains no expression token the consumer builds t [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-66907.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "n0mi1k",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66907",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-66907.osv.json b/static/projects/camel/CVE-2026-66907.osv.json
new file mode 100644
index 00000000..8c009497
--- /dev/null
+++ b/static/projects/camel/CVE-2026-66907.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66907", "summary": "Camel-Google-Storage: the consumer appended the remote object name to the configured downloadFileName directory without constraining the result", "details": "Relative path traversal vulnerability in Apache Camel Google Storage component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-google-storage consumer downloads Google Cloud Storag [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-66908.cve.json b/static/projects/camel/CVE-2026-66908.cve.json
new file mode 100644
index 00000000..db3337ea
--- /dev/null
+++ b/static/projects/camel/CVE-2026-66908.cve.json
@@ -0,0 +1,103 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-287 Improper Authentication",
+ "lang": "en",
+ "cweId": "CWE-287",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-platform-http-main",
+ "packageURL": "pkg:maven/org.apache.camel/camel-platform-http-main",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.8.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper Authentication vulnerability in Apache Camel Platform HTTP Main component.\n\n\n\nThis issue affects Apache Camel: from 4.8.0 before 4.22.0.\n\n\n\nThe camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT keystore properties. JWTAuthenticationConfigurer.buildJwtOptions returned null when neither jwtIssuer nor jwtAudience was configured, and the caller then skipped the [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper Authentication vulnerability in Apache Camel Platform HTTP Main component.</p><p>This issue affects Apache Camel: from 4.8.0 before 4.22.0.</p><p>The camel-main embedded HTTP server can protect its endpoints with JWT authentication, configured through authenticationEnabled together with the JWT keystore properties. JWTAuthenticationConfigurer.buildJwtOptions returned null when neither jwtIssuer nor jwtAudience was configured, and the caller then skippe [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-66908.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual severity rating",
+ "content": {
+ "text": "important"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "n0mi1k",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 1.0.3"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-66908",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.2"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-66908.osv.json b/static/projects/camel/CVE-2026-66908.osv.json
new file mode 100644
index 00000000..c288c400
--- /dev/null
+++ b/static/projects/camel/CVE-2026-66908.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-66908", "summary": "Camel-platform-http-main: when JWT authentication was configured with a keystore but no issuer or audience, the iss and aud claims were never validated, so any unexpired token signed by a trusted key was accepted", "details": "Improper Authentication vulnerability in Apache Camel Platform HTTP Main component.\n\n\n\nThis issue affects Apache Camel: from 4.8.0 before 4.22.0.\n\n\n\nThe camel-main embedded HTTP server can prot [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-71300.cve.json b/static/projects/camel/CVE-2026-71300.cve.json
new file mode 100644
index 00000000..95dea09e
--- /dev/null
+++ b/static/projects/camel/CVE-2026-71300.cve.json
@@ -0,0 +1,115 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Atmosphere-Websocket: WebSocket dispatch header injection",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper input validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-atmosphere-websocket",
+ "packageURL": "pkg:maven/org.apache.camel/camel-atmosphere-websocket",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-atmosphere-websocket producer selects which connected WebSocket peers a message is delivered to through Exchange headers, and the string values of those headers sat outside the Camel namespace: websocket.connectionKey and websocket.connectionKey.l [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.</p><p>This issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>The camel-atmosphere-websocket producer selects which connected WebSocket peers a message is delivered to through Exchange headers, and the string values of those headers sat outside the Camel namespace: websocket.connectionKey and websocket.connection [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-71300.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual severity rating",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Barak Srour from Apiiro",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 1.0.3"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-71300",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.2"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-71300.osv.json b/static/projects/camel/CVE-2026-71300.osv.json
new file mode 100644
index 00000000..44b15159
--- /dev/null
+++ b/static/projects/camel/CVE-2026-71300.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-71300", "summary": "Camel-Atmosphere-Websocket: WebSocket dispatch header injection", "details": "Improper input validation vulnerability in Apache Camel Atmosphere Websocket component.\n\n\n\nThis issue affects Apache Camel: from 4.0.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nThe camel-atmosphere-websocket producer selects which connected WebSocket peers a message is delivered to through Exchange headers, and [...]
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-78329.cve.json b/static/projects/camel/CVE-2026-78329.cve.json
new file mode 100644
index 00000000..f6e88883
--- /dev/null
+++ b/static/projects/camel/CVE-2026-78329.cve.json
@@ -0,0 +1,120 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-20 Improper input validation",
+ "lang": "en",
+ "cweId": "CWE-20",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "discovery": "UNKNOWN"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Camel",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.camel:camel-undertow",
+ "packageURL": "pkg:maven/org.apache.camel/camel-undertow",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.11.0",
+ "lessThan": "4.14.9",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.15.0",
+ "lessThan": "4.18.4",
+ "versionType": "semver"
+ },
+ {
+ "status": "affected",
+ "version": "4.19.0",
+ "lessThan": "4.22.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Improper input validation vulnerability in Apache Camel Undertow component.\n\n\n\nThis issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nUndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed that instance into the UndertowHttpBinding it creates lazily, overwriting the UndertowHeaderFilterStrategy that DefaultUndertowHttpBinding installs in its own con [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Improper input validation vulnerability in Apache Camel Undertow component.</p><p>This issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.</p><p>UndertowEndpoint defaulted its headerFilterStrategy field to the base HttpHeaderFilterStrategy and pushed that instance into the UndertowHttpBinding it creates lazily, overwriting the UndertowHeaderFilterStrategy that DefaultUndertowHttpBinding installs in its ow [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://camel.apache.org/security/CVE-2026-78329.html",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual severity rating",
+ "content": {
+ "text": "moderate"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino from Apache Software Foundation",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Barak Srour from Apiiro",
+ "type": "finder"
+ },
+ {
+ "lang": "en",
+ "value": "Andrea Cosentino from Apache Software Foundation",
+ "type": "remediation developer"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 1.0.3"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-78329",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.2"
+}
\ No newline at end of file
diff --git a/static/projects/camel/CVE-2026-78329.osv.json b/static/projects/camel/CVE-2026-78329.osv.json
new file mode 100644
index 00000000..11773343
--- /dev/null
+++ b/static/projects/camel/CVE-2026-78329.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-78329", "summary": "Camel-Undertow: the endpoint discarded the undertow-specific header filter strategy in favour of the base HTTP one, so the undertow filtering never ran on endpoint-configured routes", "details": "Improper input validation vulnerability in Apache Camel Undertow component.\n\n\n\nThis issue affects Apache Camel: from 4.11.0 before 4.14.9, from 4.15.0 before 4.18.4, from 4.19.0 before 4.22.0.\n\n\n\nUndertowEndpoint defaulted i [...]
\ No newline at end of file
diff --git a/static/projects/hive/CVE-2026-49845.cve.json b/static/projects/hive/CVE-2026-49845.cve.json
new file mode 100644
index 00000000..2ddf8017
--- /dev/null
+++ b/static/projects/hive/CVE-2026-49845.cve.json
@@ -0,0 +1,118 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-94 Improper Control of Generation of Code ('Code Injection')",
+ "lang": "en",
+ "cweId": "CWE-94",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "HIVE-29622"
+ ],
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Hive",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.hive:hive-standalone-metastore",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThanOrEqual": "4.2.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata (including statistics updates, truncation targets, and file-metadata cache operations) via crafted partition names in metastore RPC requests when direct SQL is enabled (the default). Users are recommended to upgrade to version 4.2.1, which [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<span>SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata (including statistics updates, truncation targets, and file-metadata cache operations) via crafted partition names in metastore RPC requests when direct SQL is enabled (the default). Users are recommended to upgrade to version 4. [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/apache/hive",
+ "tags": [
+ "product"
+ ]
+ },
+ {
+ "url": "https://github.com/apache/hive/commit/ca64f08a8e43db9845b47d5fa2e96f7fdea7288e",
+ "tags": [
+ "patch"
+ ]
+ },
+ {
+ "url": "https://issues.apache.org/jira/browse/HIVE-29622",
+ "tags": [
+ "issue-tracking"
+ ]
+ },
+ {
+ "url": "https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "critical"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Leon Johnson",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-49845",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/hive/CVE-2026-49845.osv.json b/static/projects/hive/CVE-2026-49845.osv.json
new file mode 100644
index 00000000..3f792089
--- /dev/null
+++ b/static/projects/hive/CVE-2026-49845.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-49845", "summary": "SQL Injection vulnerability in HiveMetaStore partition-name direct-SQL paths", "details": "SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows authenticated users with access to Hive Metastore APIs to read, modify, or affect unintended partition metadata (including statistics updates, truncation targets, and file-metadata cache operations) via crafted parti [...]
\ No newline at end of file
diff --git a/static/projects/hive/CVE-2026-53561.cve.json b/static/projects/hive/CVE-2026-53561.cve.json
new file mode 100644
index 00000000..e906d73e
--- /dev/null
+++ b/static/projects/hive/CVE-2026-53561.cve.json
@@ -0,0 +1,138 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-287 Improper Authentication",
+ "lang": "en",
+ "cweId": "CWE-287",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-345 Insufficient Verification of Data Authenticity",
+ "lang": "en",
+ "cweId": "CWE-345",
+ "type": "CWE"
+ }
+ ]
+ },
+ {
+ "descriptions": [
+ {
+ "description": "CWE-305 Authentication Bypass by Primary Weakness",
+ "lang": "en",
+ "cweId": "CWE-305",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "HIVE-29653"
+ ],
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Hive",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.hive:hive-service",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "4.0.0",
+ "lessThanOrEqual": "4.2.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an unauthenticated network attacker to authenticate as an arbitrary Hive user and obtain an authenticated HiveServer2 session via a forged Authorization: Bearer token sent to the /cliservice HTTP endpoint. Users are recommended to upgrade [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an unauthenticated network attacker to authenticate as an arbitrary Hive user and obtain an authenticated HiveServer2 session via a forged Authorization: Bearer token sent to the /cliservice HTTP endpoint. Users are recommended to upgr [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/apache/hive",
+ "tags": [
+ "product"
+ ]
+ },
+ {
+ "url": "https://issues.apache.org/jira/browse/HIVE-29653",
+ "tags": [
+ "issue-tracking"
+ ]
+ },
+ {
+ "url": "https://github.com/apache/hive/commit/6ca06ca1104ff7462363087a867d70d546134774",
+ "tags": [
+ "patch"
+ ]
+ },
+ {
+ "url": "https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "critical"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "Andrew Rukin (Arenadata)",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-53561",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/hive/CVE-2026-53561.osv.json b/static/projects/hive/CVE-2026-53561.osv.json
new file mode 100644
index 00000000..7b93b738
--- /dev/null
+++ b/static/projects/hive/CVE-2026-53561.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-53561", "summary": "Unauthenticated authentication bypass in HiveServer2 HTTP SAML bearer-token validation allows impersonation of any Hive user", "details": "An improper authentication vulnerability in HiveServer2 SAML bearer-token validation in Apache Hive 4.0.0 through 4.2.0 (and later unreleased branches) on deployments using HTTP transport with hive.server2.authentication=SAML allows an unauthenticated network attacker to authenticate as a [...]
\ No newline at end of file
diff --git a/static/projects/hive/CVE-2026-55976.cve.json b/static/projects/hive/CVE-2026-55976.cve.json
new file mode 100644
index 00000000..4e807348
--- /dev/null
+++ b/static/projects/hive/CVE-2026-55976.cve.json
@@ -0,0 +1,118 @@
+{
+ "containers": {
+ "cna": {
+ "providerMetadata": {
+ "orgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09"
+ },
+ "title": "SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url",
+ "problemTypes": [
+ {
+ "descriptions": [
+ {
+ "description": "CWE-918 Server-Side Request Forgery (SSRF)",
+ "lang": "en",
+ "cweId": "CWE-918",
+ "type": "CWE"
+ }
+ ]
+ }
+ ],
+ "source": {
+ "defect": [
+ "HIVE-29671"
+ ],
+ "discovery": "EXTERNAL"
+ },
+ "affected": [
+ {
+ "vendor": "Apache Software Foundation",
+ "product": "Apache Hive",
+ "collectionURL": "https://repo.maven.apache.org/maven2",
+ "packageName": "org.apache.hive:hive-serde",
+ "versions": [
+ {
+ "status": "affected",
+ "version": "2.1.0",
+ "lessThanOrEqual": "4.2.0",
+ "versionType": "semver"
+ }
+ ],
+ "defaultStatus": "unaffected"
+ }
+ ],
+ "descriptions": [
+ {
+ "value": "Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url\u00a0table property on an Avro table that is subsequently queried. This can expose cloud instance metadata, internal network services, or local server files to the Hive process identity. Users are recommended to u [...]
+ "lang": "en",
+ "supportingMedia": [
+ {
+ "type": "text/html",
+ "base64": false,
+ "value": "<p>Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the <code>avro.schema.url</code> table property on an Avro table that is subsequently queried. This can expose cloud instance metadata, internal network services, or local server files to the Hive process identity. Users [...]
+ }
+ ]
+ }
+ ],
+ "references": [
+ {
+ "url": "https://github.com/apache/hive",
+ "tags": [
+ "product"
+ ]
+ },
+ {
+ "url": "https://issues.apache.org/jira/browse/HIVE-29671",
+ "tags": [
+ "issue-tracking"
+ ]
+ },
+ {
+ "url": "https://github.com/apache/hive/commit/45049202df35cea382616624de3fe8d252aa2d00",
+ "tags": [
+ "patch"
+ ]
+ },
+ {
+ "url": "https://lists.apache.org/thread/6d56mk501fp4f8cb5wvrpj2jwd9knt05",
+ "tags": [
+ "vendor-advisory"
+ ]
+ }
+ ],
+ "metrics": [
+ {
+ "other": {
+ "type": "Textual description of severity",
+ "content": {
+ "text": "important"
+ }
+ },
+ "scenarios": [
+ {
+ "lang": "en",
+ "value": "GENERAL"
+ }
+ ]
+ }
+ ],
+ "credits": [
+ {
+ "lang": "en",
+ "value": "zhaokaifei",
+ "type": "reporter"
+ }
+ ],
+ "x_generator": {
+ "engine": "Vulnogram 0.2.0"
+ }
+ }
+ },
+ "cveMetadata": {
+ "cveId": "CVE-2026-55976",
+ "assignerOrgId": "f0158376-9dc2-43b6-827c-5f631a4d8d09",
+ "serial": 1,
+ "state": "PUBLISHED"
+ },
+ "dataType": "CVE_RECORD",
+ "dataVersion": "5.1"
+}
\ No newline at end of file
diff --git a/static/projects/hive/CVE-2026-55976.osv.json b/static/projects/hive/CVE-2026-55976.osv.json
new file mode 100644
index 00000000..1d500698
--- /dev/null
+++ b/static/projects/hive/CVE-2026-55976.osv.json
@@ -0,0 +1 @@
+{"schema_version": "1.6.1", "id": "CVE-2026-55976", "summary": "SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url", "details": "Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote attacker with CREATE TABLE privilege to cause the Hive server to fetch an attacker-controlled URL when resolving the avro.schema.url table property on an Avro table that is subsequently queried. [...]
\ No newline at end of file
(security-site) 02/02: Add security model coordinates for Apache OpenNLP (#89)
Posted by pk...@apache.org.
This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/security-site.git
commit acbf9e9c1dc38b01e4c7c9ab516b78db5acfcfb3
Author: Piotr P. Karwasz <pk...@apache.org>
AuthorDate: Wed Aug 26 12:16:52 2026 +0200
Add security model coordinates for Apache OpenNLP (#89)
* Add security model coordinates for Apache OpenNLP
The OpenNLP security model is maintained in SECURITY.md in the
apache/opennlp repository; the project's website security page points to
it as the authoritative version.
Assisted-By: Claude Fable 5 <no...@anthropic.com>
* Regenerate pages with OpenNLP security model link
Assisted-By: Claude Fable 5 <no...@anthropic.com>
---
content/projects/_index.md | 2 ++
content/projects/opennlp/_index.md | 7 ++++++-
scripts/project-coordinates.json | 4 ++--
3 files changed, 10 insertions(+), 3 deletions(-)
diff --git a/content/projects/_index.md b/content/projects/_index.md
index 57565a75..2180dbe9 100644
--- a/content/projects/_index.md
+++ b/content/projects/_index.md
@@ -994,6 +994,8 @@ Use the tabs below to jump to projects by their initial. Every project lists a s
[security@apache.org](mailto:security@apache.org?subject=OpenNLP)
- Advisories (experimental):\
[security.apache.org](/projects/opennlp/)
+ - Security model:
+ - [Apache OpenNLP security model](https://github.com/apache/opennlp/security/policy)
- <img class="project-logo" src="https://www.apache.org/logos/res/openoffice/default.png" alt="" loading="lazy"> **Apache OpenOffice**
- **Security contact:**\
[security@openoffice.apache.org](mailto:security@openoffice.apache.org?subject=OpenOffice)
diff --git a/content/projects/opennlp/_index.md b/content/projects/opennlp/_index.md
index 8589b3a1..95c1b2f8 100644
--- a/content/projects/opennlp/_index.md
+++ b/content/projects/opennlp/_index.md
@@ -8,9 +8,14 @@ layout: single
Do you want disclose a potential security issue for Apache OpenNLP? Send your report to the [Apache Security Team](mailto:security@apache.org?subject=OpenNLP).
+You can read more about the security policy on:
+
+- [Apache OpenNLP security model](https://github.com/apache/opennlp/security/policy)
+
+
# Advisories
-This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
+This section is experimental: it provides advisories since 2023 and may lag behind the official CVE publications. It may also lack details found on the project security page linked above. If you have any feedback on how you would like this data to be provided, you are welcome to reach out on our public [mailinglist](/mailinglist) or privately on [security@apache.org](mailto:security@apache.org)
{.bg-warning}
## Arbitrary Class Instantiation in GeneratorFactory via Feature Descriptor XML ## { #CVE-2026-63317 }
diff --git a/scripts/project-coordinates.json b/scripts/project-coordinates.json
index c5482802..cc659a44 100644
--- a/scripts/project-coordinates.json
+++ b/scripts/project-coordinates.json
@@ -1228,8 +1228,8 @@
},
"opennlp": {
"name": "Apache OpenNLP",
- "security_model_link": null,
- "security_model_source": null,
+ "security_model_link": "https://github.com/apache/opennlp/security/policy",
+ "security_model_source": "https://raw.githubusercontent.com/apache/opennlp/main/SECURITY.md",
"advisory_link": null,
"contact": "security@apache.org",
"logo_link": "https://www.apache.org/logos/res/opennlp/default.png"