| CVE-2026-97395 |
Apache Polaris allows an authenticated principal with permission to create or update Iceberg table properties to set…
|
Not rated
|
Sep 29, 2026 |
| CVE-2026-64640 |
Apache Polaris did not consistently validate storage locations supplied during table and view registration
|
5.3
Medium
|
Aug 6, 2026 |
| CVE-2026-42810 |
Apache Polaris accepts literal `*` characters in namespace and table names
|
9.4
Critical
|
May 4, 2026 |
| CVE-2026-42811 |
In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files,…
|
9.4
Critical
|
May 4, 2026 |
| CVE-2026-42809 |
Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the…
|
9.4
Critical
|
May 4, 2026 |
| CVE-2026-42812 |
In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the…
|
9.4
Critical
|
May 4, 2026 |