Login Request a demo
PU
Product
Pulsar
by Apache · last CVE Apr 9, 2025
20
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities20In the news0Timeline
Severity mix
Critical 3High 7Medium 10Low 0
Severity
All severities20Critical3High7Medium10Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Pulsar to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2024-27317
9.9
57%
Mar 12
In Pulsar Functions Worker, authenticated users can upload functions in jar or nar files
Affected: 2.4.0 before 2.10.6; 2.11.0 before 2.11.4; 3.0.0 before 3.0.3; 3.1.0 before 3.1.3; 3.2.0
CVE-2024-27135
9.9
6%
Mar 12
Improper input validation in the Pulsar Function Worker allows a malicious authenticated user to execute arbitrary Java code on the Pulsar Function worker, outside of the…
Affected: 2.4.0 before 2.10.6; 2.11.0 before 2.11.4; 3.0.0 before 3.0.3; 3.1.0 before 3.1.3; 3.2.0
CVE-2021-22160
9.8
53%
May 26
If Apache Pulsar is configured to authenticate clients using tokens based on JSON Web Tokens (JWT), the signature of the token is not validated if the algorithm of the presented…
Affected: before 2.7.1
Showing 3