apache/pulsar
master@ 367caff
Fixes4
CVEs0
Peak severityCritical
Commits14,677
Regression coverage50.0%
Highlights
Authorization Bypass: 2 prior fixes. Scrutinize any change in this area.
AuthenticationProviderToken.java: most-fixed (1 issue). Treat as high-risk during review.
4 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
Signature Verification Bypass: 1 historical fix(es) link AuthenticationProviderToken.java to Signature Verification Bypass.
Authentication Bypass: 1 historical fix(es) link pulsar-proxy/src/main/java/org/apache/pulsar/proxy/server/WebServer.java to Authentication Bypass.
Authorization Bypass: 1 historical fix(es) link PulsarAuthorizationProvider.java to Authorization Bypass.
Last analyzed 30 Sep 2026, 10:09 UTC