agentprime: apache-software-foundation-apache-pulsarEvery new CVE for apache-software-foundation-apache-pulsar.https://agentprime.io/CVE-2026-105945: Apache Pulsar: Improper Validation of Package Name Components Allows Cross-Tenant Package Access in Filesystem Package Storagehttps://agentprime.io/advisories/CVE-2026-105945/https://agentprime.io/advisories/CVE-2026-105945/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:18:26 GMTCVECVE-2026-105942: Apache Pulsar: Original principal of proxied requests authorized with the proxy's authentication data, allowing privilege escalationhttps://agentprime.io/advisories/CVE-2026-105942/https://agentprime.io/advisories/CVE-2026-105942/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:14:35 GMTCVECVE-2026-105938: Apache Pulsar: Subscription authorization policies not enforced by namespace-level backlog and unsubscribe operations and by topic expire-allhttps://agentprime.io/advisories/CVE-2026-105938/https://agentprime.io/advisories/CVE-2026-105938/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:13:35 GMTCVECVE-2026-105937: Apache Pulsar: Missing authorization of the shadow topic source allows cross-tenant message disclosure and deletion of source topic datahttps://agentprime.io/advisories/CVE-2026-105937/https://agentprime.io/advisories/CVE-2026-105937/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:12:51 GMTCVECVE-2026-105936: Apache Pulsar: Functions connectors list endpoint does not apply the super-user check of the worker connectors endpointhttps://agentprime.io/advisories/CVE-2026-105936/https://agentprime.io/advisories/CVE-2026-105936/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:11:20 GMTCVECVE-2026-105935: Apache Pulsar: Function trigger publishes to the input topic without checking the caller's produce permissionhttps://agentprime.io/advisories/CVE-2026-105935/https://agentprime.io/advisories/CVE-2026-105935/CVSS 4.9 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:10:24 GMTCVECVE-2026-105934: Apache Pulsar: Missing tenant admin authorization check when truncating a partitioned topichttps://agentprime.io/advisories/CVE-2026-105934/https://agentprime.io/advisories/CVE-2026-105934/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:08:43 GMTCVECVE-2026-105933: Apache Pulsar: Namespace encryption requirement not enforced after a failure during topic initializationhttps://agentprime.io/advisories/CVE-2026-105933/https://agentprime.io/advisories/CVE-2026-105933/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:07:43 GMTCVECVE-2026-105932: Apache Pulsar: Missing topic policy authorization on non-persistent topic entry filter endpointshttps://agentprime.io/advisories/CVE-2026-105932/https://agentprime.io/advisories/CVE-2026-105932/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:06:59 GMTCVECVE-2026-105931: Apache Pulsar: Missing authorization on transaction admin endpoints exposes transaction coordinator and transaction statistics of other tenantshttps://agentprime.io/advisories/CVE-2026-105931/https://agentprime.io/advisories/CVE-2026-105931/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:02:31 GMTCVECVE-2026-105930: Apache Pulsar: Improper Authorization of Function, Source and Sink Package URLs Allows Cross-Tenant Package Downloadhttps://agentprime.io/advisories/CVE-2026-105930/https://agentprime.io/advisories/CVE-2026-105930/CVSS 6.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:01:29 GMTCVECVE-2026-105927: Apache Pulsar: Improper authorization of WebSocket consumer dead letter topic allows writes without PRODUCE permissionhttps://agentprime.io/advisories/CVE-2026-105927/https://agentprime.io/advisories/CVE-2026-105927/CVSS 2.3 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 18:00:31 GMTCVECVE-2026-105926: Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commandshttps://agentprime.io/advisories/CVE-2026-105926/https://agentprime.io/advisories/CVE-2026-105926/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 17:59:55 GMTCVECVE-2026-105869: Apache Pulsar: MultiRolesTokenAuthorizationProvider uses roles from unverified tokens for HTTP requests that fall back to the anonymous user rolehttps://agentprime.io/advisories/CVE-2026-105869/https://agentprime.io/advisories/CVE-2026-105869/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 17:58:54 GMTCVEcritical