https://seclists.org/oss-sec/2026/q4/296: Apache Pulsar: 14 CVEs fixed in 4.0.14, 4.2.5 and 5.0.0 (combined announcement)
Published Oct 21, 2026
·Updated
Affected Software
1 affected component
Apache Pulsar>=1.22.0-incubating<4.0.14, >=2.0.0-rc1-incubating<4.0.14, >=2.2.0<4.0.14, >=2.3.0<4.0.14, >=2.4.1<4.0.14, >=2.8.0<4.0.14, >=2.8.1<4.0.14, >=2.10.0<4.0.14, >=3.0.0<4.0.14, >=3.3.0<4.0.14, >=4.1.0<4.2.5, >=4.2.0<4.2.5