CVE-2026-100227 HIGH 7.5 Apache Cxf — Improper Verification of Cryptographic Signature vulnerability in Apache CXF's JAX-RS XML Security module. The… 2026-10-09 CVE-2026-107937 HIGH 7.5 Apache Cxf — In Apache CXF, the parser for multipart/MTOM attachment part headers did not fully enforce the configured atta… 2026-10-09 CVE-2026-107938 CRITICAL 9.1 Apache Cxf — In Apache CXF, the Netty-based HTTP client transport (cxf-rt-transports-http-netty-client) did not verify that… 2026-10-09 CVE-2026-108039 HIGH 7.5 Apache Cxf — By default, StaxUtils placed no limit on the total number of elements or the total number of characters in an … 2026-10-09 CVE-2026-71575 CRITICAL 9.1 Apache Cxf — The max_age authentication-freshness check in OidcClientCodeRequestFilter was inoperative due to a millisecond… 2026-10-09 CVE-2026-73179 HIGH 8.1 Apache Cxf — Improper enforcement of single-use authorization code semantics in the JPA OAuth2 authorization code grant pro… 2026-10-09 CVE-2026-78384 HIGH 7.5 Apache Cxf — CompressionUtils.inflate() decompressed attacker-controlled DEFLATE data with no output-size cap. A small (~KB… 2026-10-09 CVE-2026-79650 MEDIUM 6.1 Apache Cxf — Apache CXF’s OIDC relying-party component could redirect users to an attacker-controlled URL after successful … 2026-10-09 CVE-2026-86463 HIGH 7.5 Apache Cxf — Apache CXF's FIQL query parser has a vulnerability in how it searches for operators in query expressions. The … 2026-10-09 CVE-2026-97468 CRITICAL 9.1 Apache Cxf — Apache CXF's STSTokenValidator and Security Token Service (STS) cached validated security tokens under a non-c… 2026-10-09 CVE-2026-97791 HIGH 7.5 Apache Cxf — In Apache CXF, STSTokenValidator checks whether a SAML assertion is signed by a trusted certificate before dec… 2026-10-09 CVE-2026-90466 MEDIUM 6.5 Apache Impala — Path traversal of 'trusted_jar_paths' in Impala 4.5.2 allows an attacker-controlled JAR to be loaded via a rel… 2026-10-07 CVE-2026-92414 CRITICAL 9.3 Apache Jackrabbit — : Session Fixation / Session Reuse across Users vulnerability in Apache Jackrabbit. Jackrabbit WebDAV serve… 2026-10-07 CVE-2026-92415 MEDIUM 6.9 Apache Jackrabbit — — Use of Externally-Controlled Input to Select Classes or Code vulnerability in Apache Jackrabbit's WebDAV/Dav… 2026-10-07 CVE-2026-105239 MEDIUM 5.3 Apache Log4net — Improper Neutralization of Null Byte or NUL Character vulnerability in the EventLogAppender of Apache log4net.… 2026-10-06 CVE-2026-105240 MEDIUM 5.3 Apache Log4net — Improper Neutralization of Null Byte or NUL Character vulnerability in the OutputDebugStringAppender of Apache… 2026-10-06 CVE-2026-105241 MEDIUM 5.3 Apache Log4net — Improper Handling of Unicode Encoding vulnerability in the SmtpPickupDirAppender of Apache log4net. Content t… 2026-10-06 CVE-2026-105242 MEDIUM 5.3 Apache Log4net — Improper Handling of Exceptional Conditions vulnerability in the aspnet-request pattern converter of Apache lo… 2026-10-06 CVE-2026-105243 MEDIUM 5.3 Apache Log4net — Insufficient Logging vulnerability in the EventLogAppender of Apache log4net. Long messages were truncated to… 2026-10-06 CVE-2026-105244 MEDIUM 5.3 Apache Log4net — Improper Encoding or Escaping of Output vulnerability in the RemoteSyslogAppender of Apache log4net. Every ch… 2026-10-06 CVE-2026-104711 CRITICAL 9.8 Apache Struts — Improper neutralization of special elements used in an expression language statement ('Expression Language Inj… 2026-10-05 CVE-2026-104712 HIGH 7.5 Apache Struts — Asymmetric resource consumption (amplification) vulnerability in Apache Struts. When a request parameter is bo… 2026-10-05 CVE-2026-104713 MEDIUM 6.5 Apache Struts — Allocation of resources without limits or throttling vulnerability in the Apache Struts REST plugin. A request… 2026-10-05 CVE-2026-104714 HIGH 8.8 Apache Struts — Concurrent execution using shared resource with improper synchronization ('race condition') vulnerability in A… 2026-10-05 CVE-2026-42356 LOW 3.7 Apache Http Server — Deployment of wrong handler vulnerability in Apache HTTP Server allows the target of some internal redirects f… 2026-10-01 CVE-2026-42528 MEDIUM 4.3 Apache Http Server — A memory calculation bug in mod_dav in Apache httpd 2.4.67 and earlier allows an attacker with permission to c… 2026-10-01 CVE-2026-46729 HIGH 7.5 Apache Http Server — NULL Pointer Dereference vulnerability in Apache HTTP Servers mod_heartmonitor over unicast listener. This … 2026-10-01 CVE-2026-47360 HIGH 7.5 Apache Http Server — Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache HTTP Server's mod_session_c… 2026-10-01 CVE-2026-48005 HIGH 7.5 Apache Http Server — Missing authentication checks in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.6… 2026-10-01 CVE-2026-56153 HIGH 7.5 Apache Http Server — Out-of-bounds Write vulnerability in Apache HTTP Server's mod_charset_lite. This issue affects Apache HTTP … 2026-10-01 CVE-2026-56154 CRITICAL 9.8 Apache Http Server — Use After Free vulnerability in Apache HTTP Server's mod_rewrite when using lookahead (%{LA-U:HTTP:...}) Th… 2026-10-01 CVE-2026-56449 HIGH 7.5 Apache Http Server — Out-of-bounds Write vulnerability in Apache HTTP Server's mod_proxy_html with crafted HTTP response bodies. … 2026-10-01 CVE-2026-57941 CRITICAL 9.8 Apache Http Server — Use After Free vulnerability in Apache HTTP Server's mod_http2 via shared session->bbtmp re-entrancy This i… 2026-10-01 CVE-2026-58415 MEDIUM 5.3 Apache Http Server — Internal state files accessible to external parties in mod_dav_fs in Apache Software Foundation Apache HTTP Se… 2026-10-01 CVE-2026-59685 HIGH 7.5 Apache Http Server — Out-of-bounds Write vulnerability in Apache HTTP Server on Windows while processing paths with 8.3 names that … 2026-10-01 CVE-2026-59797 CRITICAL 9.8 Apache Http Server — Improper Privilege Management vulnerability in Apache HTTP Server's mod_ssl via SSLRequire and file-related ex… 2026-10-01 CVE-2026-63045 HIGH 7.5 Apache Http Server — Improper validation of FTP PASV reply address in mod_proxy_ftp in Apache Software Foundation Apache HTTP Serve… 2026-10-01 CVE-2026-63292 HIGH 7.5 Apache Http Server — Stack-based buffer overflow in mod_vhost_alias in Apache Software Foundation Apache HTTP Server through 2.4.68… 2026-10-01 CVE-2026-63686 HIGH 7.5 Apache Http Server — A NULL pointer dereference in mod_xml2enc in Apache Software Foundation Apache HTTP Server before 2.4.69 on al… 2026-10-01 CVE-2026-63718 HIGH 7.5 Apache Http Server — Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') response smuggling vulnerabil… 2026-10-01 CVE-2026-73636 HIGH 8.1 Apache Http Server — Authentication bypass by capture-replay in mod_auth_digest in Apache Software Foundation Apache HTTP Server 2.… 2026-10-01 CVE-2026-73637 HIGH 7.3 Apache Http Server — Use after free in mod_auth_digest in Apache Software Foundation Apache HTTP Server before 2.4.69 on all platfo… 2026-10-01 CVE-2026-79768 MEDIUM 5.3 Apache Http Server — Path equivalence: '/./' (single dot directory) vulnerability in Apache HTTP Server's mod_userdir module when c… 2026-10-01 CVE-2026-93546 HIGH 8.8 Apache Http Server — Integer overflow in mod_dav_fs in Apache HTTP Server through 2.4.68 allows an authenticated WebDAV client with… 2026-10-01 CVE-2026-85532 HIGH 7.5 Apache Wss4j — Apache WSS4J accepted attacker-controlled derived-key lengths and offsets without adequate bounds. This could … 2026-09-30 CVE-2026-87830 CRITICAL 9.1 Apache Wss4j — In the StAX streaming WS-SecurityPolicy validator, certain relative or unsupported XPath expressions can be co… 2026-09-30 CVE-2026-88920 CRITICAL 9.8 Apache Wss4j — An authentication bypass in the DOM security processor in Apache WSS4J allows unauthenticated remote attackers… 2026-09-30 CVE-2026-89238 CRITICAL 9.1 Apache Wss4j — WSS4J EncryptedHeader child confusion could promote an attacker-controlled plaintext element as the decrypted … 2026-09-30 CVE-2026-92121 HIGH 7.5 Apache Wss4j — In the WSS4J streaming (StAX) code, a signature reference using the WS-Security STR-Transform leaves an intern… 2026-09-30 CVE-2026-92899 MEDIUM 4.8 Apache Wss4j — Apache WSS4J remembers the Nonce of each UsernameToken it accepts, so a captured token cannot be reused. It st… 2026-09-30 CVE-2026-95616 HIGH 7.5 Apache Wss4j — An integer overflow in WSS4J's DER bounds check lets an oversized allocation pass validation. An unauthenticat… 2026-09-30 CVE-2026-102495 HIGH 7.5 Apache Xmlschema — Apache XmlSchema doesn't limit how deeply schema imports and includes can be nested, so a malicious schema can… 2026-09-29 CVE-2026-102496 HIGH 7.5 Apache Xmlschema — Apache XmlSchema doesn't limit how deeply schema structures can be nested when it builds its schema model, so … 2026-09-29 CVE-2026-102497 HIGH 7.5 Apache Xmlschema — The Apache XmlSchema walker (xmlschema-walker) doesn't detect cycles in type derivation, substitution groups, … 2026-09-29 CVE-2026-66083 MEDIUM 6.5 Apache Dolphinscheduler — The /datasources/unauth-datasource endpoint does not properly enforce data source authorization. An authentica… 2026-09-29 CVE-2026-81862 MEDIUM 6.5 Apache Airflow Teradata Provider — Apache Airflow's Teradata provider embedded cloud storage credentials directly into SQL statements. `S3ToTerad… 2026-09-29 CVE-2026-81914 MEDIUM 4.3 Apache Airflow Google Provider — Apache Airflow's Google provider built Google Drive search expressions by interpolating file and folder names … 2026-09-29 CVE-2026-81930 MEDIUM 6.3 Apache Airflow Snowflake Provider — Apache Airflow's Snowflake provider did not validate the connection's `account` and `region` fields before int… 2026-09-29 CVE-2026-86843 MEDIUM 6.3 Apache Airflow Teradata Provider — The Apache Airflow Teradata provider's compute-cluster example Dag declared every one of its Dag Params as unc… 2026-09-29 CVE-2026-91012 CRITICAL 9.8 Apache Karaf — org.apache.karaf.config.core.impl.ConfigRepositoryImpl#update(pid, properties), which backs the "config" MBean… 2026-09-29 CVE-2026-91048 CRITICAL 9.8 Apache Karaf — The jdbc shell command scope shipped no org.apache.karaf.command.acl.jdbc.cfg. Karaf's command guard (SecuredS… 2026-09-29 CVE-2026-91085 MEDIUM 6.3 Apache Karaf — Apache Karaf's shell/SSH command security is enforced by per-scope ACL configuration files (etc/org.apache.kar… 2026-09-29 CVE-2026-92142 HIGH 8.8 Apache Karaf — Apache Karaf exposes a JMX MBeanServer guarded by KarafMBeanServerGuard, which enforces role-based access cont… 2026-09-29 CVE-2026-90979 HIGH 7.3 Apache Karaf — LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substit… 2026-09-28 CVE-2026-91006 HIGH 8.8 Apache Karaf — Apache Karaf's instance-management service (InstanceServiceImpl) builds the command line used to launch a chil… 2026-09-28 CVE-2026-92550 HIGH 7.5 Apache Qpid Broker J — A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to… 2026-09-25 CVE-2026-92560 HIGH 7.5 Apache Qpid Broker J — A pre-authentication attacker could leverage type size/count handling to cause excessive allocation leading to… 2026-09-25 CVE-2026-92564 HIGH 7.5 Apache Qpid Broker J — A pre-authentication attacker could leverage type nesting to cause a StackOverflowError potentially leading to… 2026-09-25 CVE-2026-92573 MEDIUM 6.5 Apache Qpid Broker J — Improper handling of compressed data in the shared GZIP decompressor used for AMQP 0-8/0-9/0-9-1 and AMQP 0-10… 2026-09-25 CVE-2026-92608 HIGH 7.5 Apache Qpid Broker J — Improper handling of property-encoding exceptions in AMQP 1.0-to-AMQP 0-10 message conversion allows authentic… 2026-09-25 CVE-2026-92609 CRITICAL 9.8 Apache Qpid Broker J — Session fixation in HTTP management authentication allows remote attackers to gain unauthorized access to an a… 2026-09-25 CVE-2026-73192 MEDIUM 6.1 Apache Sling Xss — An improper neutralization of input during web page generation ('Cross-site Scripting') [CWE-79] vulnerability… 2026-09-23 CVE-2026-86243 HIGH 7.5 Apache Tomcat Native — Buffer over-read vulnerability in Apache Tomcat Native during the TLS handshake permits a malicious user to tr… 2026-09-23 CVE-2026-86246 CRITICAL 9.1 Apache Tomcat Native — Initialization of a resource with an insecure default vulnerability in Apache Tomcat Native enabled insecure o… 2026-09-23 CVE-2026-86247 HIGH 7.4 Apache Tomcat Native — Race condition within a thread vulnerability in Apache Tomcat Native allowed client certificate verification r… 2026-09-23 CVE-2026-91852 MEDIUM 6.1 Apache Sling Xss — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache S… 2026-09-23 CVE-2026-91928 MEDIUM 6.1 Apache Sling Xss — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache S… 2026-09-23 CVE-2026-91999 MEDIUM 6.1 Apache Sling Xss — Improper neutralization of input during web page generation ('cross-site scripting') vulnerability in Apache S… 2026-09-23 CVE-2026-92001 MEDIUM 6.1 Apache Sling Xss — Improper restriction of recursive entity references in DTDs ('XML entity expansion') vulnerability in Apache S… 2026-09-23 CVE-2026-94243 HIGH 7.3 Apache Sling Security Bundle — A vulnerability in Apache Sling Security Bundle: the ReferrerFilter accepts weaker-than-orgin evidence. Thi… 2026-09-23 CVE-2026-94251 MEDIUM 6.5 Apache Sling Security Bundle — A vulnerability in Apache Sling Security Bundle: ContentDispositionFilter mediates only one address/API shape … 2026-09-23 CVE-2026-75158 MEDIUM 4.3 Apache Airflow — Apache Airflow's `/assets/events` API returned asset events for every Dag in the deployment, with no filter re… 2026-09-21 CVE-2026-82355 MEDIUM 4.2 Apache Airflow — When a request to the Airflow core API carries both a session cookie and an explicit `Authorization: Bearer` t… 2026-09-21 CVE-2026-86473 CRITICAL 9.1 Apache Airflow — Apache Airflow: the Core API logout endpoint revokes only a session token presented as the _token cookie. When… 2026-09-21 CVE-2026-91863 HIGH 7.5 Apache Neethi — A specially crafted WS-Policy document with deeply nested policy elements can bypass Neethi's nesting-depth li… 2026-09-21 CVE-2026-91864 HIGH 7.5 Apache Neethi — A specially crafted WS-Policy document can pack unlimited content inside a policy assertion, which Neethi copi… 2026-09-21 CVE-2026-91865 HIGH 7.5 Apache Neethi — A small WS-Policy document using repeated policy references can force Neethi to re-expand the same references … 2026-09-21 CVE-2026-91866 HIGH 7.5 Apache Neethi — A specially crafted pair of WS-Policy documents can force Neethi's policy-intersection to do exponential amoun… 2026-09-21 CVE-2026-91867 MEDIUM 4.3 Apache Neethi — When Neethi fetches a remote policy reference, it only limits the time per read, not the whole transfer, so a … 2026-09-21 CVE-2026-59739 HIGH 7.5 Apache Zookeeper — Information disclosure via SetWatches reconnect replay in Apache ZooKeeper due to missing ACL check. An attack… 2026-09-16 CVE-2026-59969 HIGH 7.5 Apache Zookeeper — Apache ZooKeeper quorum TLS fails to enforce peer hostname verification in FIPS-mode deployments. When sslQuor… 2026-09-16 CVE-2026-70469 HIGH 7.5 Apache Nifi — Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected r… 2026-09-16 CVE-2026-76186 CRITICAL 9.1 Apache Airflow Keycloak Provider — Apache Airflow Keycloak provider: from Airflow 3.3 the Keycloak auth manager takes a user's identity from the … 2026-09-16 CVE-2026-76187 CRITICAL 9.8 Apache Airflow Keycloak Provider — Apache Airflow Keycloak provider: the unauthenticated token endpoint accepts a client-credentials grant for an… 2026-09-16 CVE-2026-79993 HIGH 7.5 Apache Zookeeper — The `deleteContainer` opcode (0x14/20) is processed without verifying the caller's ACL permissions, allowing a… 2026-09-16 CVE-2026-81866 LOW 0.5 Apache Nifi — Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that… 2026-09-16 CVE-2026-82310 HIGH 7.2 Apache Airflow Fab Provider — Apache Airflow FAB provider: deactivating a user account does not stop tokens issued to that account before de… 2026-09-16 CVE-2026-82311 CRITICAL 9.8 Apache Airflow Fab Provider — Apache Airflow FAB provider: resetting a user's password does not delete that user's existing database-backed … 2026-09-16 CVE-2026-82561 MEDIUM 5.9 Apache Nifi — Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group … 2026-09-16 CVE-2026-84439 MEDIUM 5.3 Apache Zookeeper — When audit logging is enabled (zookeeper.audit.enable=true), an unauthenticated attacker can inject arbitrary … 2026-09-16 CVE-2026-84501 MEDIUM 5.3 Apache Zookeeper — An unauthenticated attacker can inject arbitrary fake log lines into Apache ZooKeeper's operational log by sen… 2026-09-16 CVE-2026-86089 LOW 2.3 Apache Nifi — Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector usin… 2026-09-16 CVE-2026-86462 CRITICAL 9.1 Apache Airflow Fab Provider — Apache Airflow FAB provider: changing a user's password through the Admin user-edit PATCH endpoint does not in… 2026-09-16 CVE-2026-86465 MEDIUM 6.5 Apache Airflow Akeyless Provider — Apache Airflow Akeyless provider: the Akeyless secrets backend's team-scope guard can be bypassed with a user-… 2026-09-16 CVE-2026-86466 HIGH 8.1 Apache Airflow Fab Provider — Apache Airflow FAB provider: the Authentik OAuth path in the FAB auth manager does not validate the issuer or … 2026-09-16 CVE-2026-86792 HIGH 8.8 Apache Airflow Apache Kafka Provider — Apache Airflow Apache Kafka provider versions 1.15.0 before 2.0.0 resolve dotted-path strings found in a Kafka… 2026-09-16 CVE-2026-87976 HIGH 7.2 Apache Nifi Registry — Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle conte… 2026-09-16 CVE-2026-67211 HIGH 7.5 Apache Opennlp — OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellModelSerializer Versions Affecte… 2026-09-11 CVE-2026-82617 CRITICAL 10 Apache Opennlp — The two built-in name-finder patterns exposed by opennlp.tools.namefind.RegexNameFinderFactory - DEFAULT_REGEX… 2026-09-11 CVE-2026-49362 HIGH 7.5 Apache Artemis — An unauthenticated remote attacker can create arbitrary durable queues via the CORE protocol, leading to unaut… 2026-09-10 CVE-2026-49363 HIGH 7.5 Apache Artemis — An unauthenticated remote attacker connecting with the CORE protocol can discover cluster node details by send… 2026-09-10 CVE-2026-49364 CRITICAL 9.1 Apache Artemis — An unauthenticated network-adjacent attacker can leverage discovery to capture cluster administrative credenti… 2026-09-10 CVE-2026-57822 MEDIUM 6.5 Apache Artemis — When the broker is processing message-based management requests, sent by an authenticated messaging client tha… 2026-09-10 CVE-2026-57967 CRITICAL 9.8 Apache Artemis — An unauthenticated remote attacker can craft a CORE protocol SESSION_REATTACH packet to steal an existing sess… 2026-09-10 CVE-2026-67593 CRITICAL 9.1 Apache Artemis — A remote attacker can craft an Openwire RemoveSubscriptionInfo command to cause the deletion of a queue on the… 2026-09-10 CVE-2026-75880 MEDIUM 6.5 Apache Artemis — An authenticated client could attach a consumer with a selector containing crafted wildcard usage that results… 2026-09-10 CVE-2026-80351 CRITICAL 9.8 Apache Camel K — Improper neutralization of directives in dynamically evaluated code ('eval injection') vulnerability in Apache… 2026-09-10 CVE-2026-80352 CRITICAL 9.8 Apache Camel K — Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Camel K. A YAML injection… 2026-09-10 CVE-2026-80354 HIGH 8.1 Apache Camel K — Authorization bypass through User-Controlled key vulnerability in Apache Camel K. An authorization vulnerab… 2026-09-10 CVE-2026-84939 CRITICAL 9.1 Apache Freemarker — Path traversal vulnerability in Apache FreeMarker template loading mechanism, if the attacker can specify an a… 2026-09-10 CVE-2026-41869 CRITICAL 9.1 Apache Nutch — Missing Authorization, Improper Resource Shutdown and Job Interruption vulnerability in Apache Nutch Server (… 2026-09-09 CVE-2026-41870 HIGH 8.8 Apache Nutch — Missing Authorization, Improper Control of Generation of Code ('Code Injection'), Improper Control of Dynamica… 2026-09-09 CVE-2026-41871 CRITICAL 9.8 Apache Nutch — Missing Authorization, Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vuln… 2026-09-09 CVE-2026-54048 MEDIUM 5.3 Apache Impala — Specifying tblproperties('avro.schema.url'=' http://...' ) or with a 'file:///' URI on a table in Impala 2.0.0… 2026-09-09 CVE-2026-56207 CRITICAL 9.8 Apache Impala — Signature of Bearer token is not verified in last step of SAML2 authentication for Impala's hs2-http interface… 2026-09-09 CVE-2026-57866 HIGH 8.8 Apache Impala — Server side request forgery in Apache Impala versions 4.4.x and 4.5.x.  Authenticated Impala users with permis… 2026-09-09 CVE-2026-65181 HIGH 8.1 Apache Impala — Insufficient authorization of Data Source tables in Impala 2.7-4.5 allows a client with privileges to upload a… 2026-09-09 CVE-2026-73334 HIGH 8.1 Apache Parquet Hadoop — Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12… 2026-09-09 CVE-2026-74761 HIGH 7.5 Apache Activemq Broker — Improper input validation in TopicRegion in Apache ActiveMQ, Apache ActiveMQ Broker, and Apache ActiveMQ All o… 2026-09-09 CVE-2026-75156 CRITICAL 9.1 Apache Airflow Fab Provider — Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the issuer or audience of Azure AD `i… 2026-09-08 CVE-2026-78254 HIGH 7.4 Apache Ant — The ftp and scp tasks of Apache Ant can download files from a remote server. A malicious server can provide re… 2026-09-07