AP
Product
Apache Polaris
by Apache Software Foundation · last CVE Sep 29, 2026
6
CVEs
0
On KEV
9.9
Max CVSS
1
New 30D
Severity mix
Critical 4High 1Medium 1Low 0
Watch

Add Apache Polaris to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-97395
8.1
0%
Sep 29
Apache Polaris: Allows authorized table writers to redirect server-side Iceberg FileIO requests to attacker-controlled endpoints using operation-scoped storage credentials
Affected: before 1.8.0
Showing 1