Security context
What an agent needs to avoid regressing past fixes and find the next vuln in this repo.
apache/pulsar
master @ 0d2beba
3
Fixes
20
CVEs
CRITICAL
Peak severity
0.0%
Coverage
Highlights
Denial of Service: 3 prior fixes. Scrutinize any change in this area.
managed-ledger: most-fixed (1 issue). Treat as high-risk during review.
0 high-severity fixes in this history; regressions here are high-impact.
Recurring patterns
The bug types that recur here, drawn from past fixes, not open vulnerabilities.
Denial of Service: Resource and memory leaks occur when a ledger is closed or fenced during rollover operations, leaving pending write entries un-cleared in ManagedLedgerImpl and triggering Out-of-Memory (OOM) failures. Developers must ensure that state transitions to closed or fenced systematically clear all outstanding queues.
Denial of Service: Redundant reference-counting retention calls on replicated message headers and payloads lead to persistent off-heap memory leaks within the ShadowReplicator. This can deplete available broker memory, resulting in overall system instability and denial of service.
Denial of Service: Failure to close outbound channels upon connection failures in the Pulsar proxy causes file descriptor exhaustion. This leaks network resources, eventually preventing the proxy from establishing new downstream or upstream connections.