Known Vulnerabilities for Apache Pulsar by Apache Software Foundation

Listed below are 10 of the newest known vulnerabilities associated with "Apache Pulsar" by "Apache Software Foundation".

These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.

Data on known vulnerable versions is also displayed based on information from known CPEs

Known Vulnerabilities

CVE Shortened Description Severity Publish Date Last Modified
CVE-2026-105945 json The Pulsar Packages Management Service can be configured to store packages on the local filesystem of the broker by using the... Not Provided 2026-10-21 2026-10-21
CVE-2026-105944 json Apache Pulsar Manager is a web console for administering Apache Pulsar clusters. It has its own user accounts and login, and ... Not Provided 2026-10-21 2026-10-21
CVE-2026-105942 json When a configured proxy role sends a request to the broker on behalf of another user (the original principal), the broker is ... Not Provided 2026-10-21 2026-10-21
CVE-2026-105938 json Apache Pulsar namespaces can restrict which roles may use a subscription, either with the Prefix subscription authentication ... Not Provided 2026-10-21 2026-10-21
CVE-2026-105937 json Apache Pulsar shadow topics (PIP-180) are topics that read the stored messages of a source topic from that topic's managed le... Not Provided 2026-10-21 2026-10-21
CVE-2026-105936 json The Pulsar Functions worker REST API provides two endpoints that return the catalog of Pulsar IO connectors installed on the ... Not Provided 2026-10-21 2026-10-21
CVE-2026-105935 json The Pulsar Functions Worker provides a REST API endpoint for triggering a function, which publishes a caller-supplied value t... Not Provided 2026-10-21 2026-10-21
CVE-2026-105934 json The Apache Pulsar broker admin REST API provides a truncate operation for persistent topics (DELETE /admin/v2/persistent/{ten... Not Provided 2026-10-21 2026-10-21
CVE-2026-105933 json Apache Pulsar allows an administrator to require end-to-end message encryption for all topics in a namespace by setting the e... Not Provided 2026-10-21 2026-10-21
CVE-2026-105932 json The Apache Pulsar broker admin REST API provides endpoints to read, set and remove the topic-level entry filter policy of a t... Not Provided 2026-10-21 2026-10-21
Results limited to 10 most recent vulnerabilities

© CVE.report 2026

Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.

CVE, CWE, and OVAL are registred trademarks of The MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. This site includes MITRE data granted under the following license.

Free CVE JSON API cve.report/api

CVE.report and Source URL Uptime Status status.cve.report