CVE mentions, exploit signals, and PoC evidence in one fast public view.
Vendor/product archive
4 CVEs tagged to apache / polaris — 4 Critical, 0 High, 0 Medium, 0 Low, 0 Unrated.
In Apache Iceberg, the table's metadata files are control files: they tell readers which data files belong to the table and which table version to read. `write.metadata.path` i…
In plain terms, Apache Polaris is supposed to issue short-lived GCS credentials that only work for one table's files, but a crafted namespace or table name can cause those credent…
Apache Polaris accepts literal `*` characters in namespace and table names. When it later builds temporary S3 access policies for delegated table access, those same characters app…
Apache Polaris can issue broad temporary ("vended") storage credentials during staged table creation before the effective table location has been validated or durably reserved. T…