← All credits
Andrea Cosentino
88 vulnerability records and advisories credit this contributor.
CVE-2026-49097
Apache Camel: Camel-IRC: The irc.sendTo (and other irc.*) Exchange header constants used non-Camel-prefixed names that bypass the HTTP header filter, allowing an HTTP client to redirect outgoing IRC messages to arbitrary channels or users
CVE-2026-40564
Apache Flink Kubernetes Operator: Server-Side Request Forgery and local file access in Kubernetes Operator
CVE-2026-49361
Apache Fluss Netty Frame Decoder Memory Exhaustion Vulnerability
CVE-2026-23552
Apache Camel: Camel-Keycloak: Cross-Realm Token Acceptance Bypass in KeycloakSecurityPolicy
CVE-2024-23454
Apache Hadoop: Temporary File Local Information Disclosure
CVE-2024-23953
Apache Hive: Timing Attack Against Signature in LLAP util
CVE-2023-41834
Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences
CVE-2024-29869
Apache Hive: Credentials file created with non restrictive permissions