Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Release: Apache YuniKorn 1.10.0 Clear all filters
TI-2026-68954 CVE-2026-78243 · GHSA-79rm-9vfm-ggww

Apache YuniKorn LDAP group provider crashes on malformed group entry

Priority LOW 11

Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribut…

CVSS 4.0LOW 2.1 Network Low privileges User interaction EPSS 0.00245 Published 2026-10-07 Fixed in 1.10.0 CWE-248
TI-2026-68971 CVE-2026-92393 · GHSA-q2pg-9xr3-7r4g

Apache YuniKorn admission control bypass via workload updates

Priority LOW 11

Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks.

CVSS 4.0LOW 2.0 Network High privileges User interaction EPSS 0.00314 Published 2026-10-07 Fixed in 1.10.0 CWE-863