| CVE-2026-42810 |
Apache Polaris accepts literal `*` characters in namespace and table names
|
9.4
Critical
|
May 4, 2026 |
| CVE-2026-42811 |
In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files,…
|
9.4
Critical
|
May 4, 2026 |
| CVE-2026-42809 |
Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the…
|
9.4
Critical
|
May 4, 2026 |
| CVE-2026-42812 |
In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the…
|
9.4
Critical
|
May 4, 2026 |