apache-polaris vulnerabilities

CVEs whose affected-version data names the apache-polaris package (pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-64640NonePoC

1mo ago

Apache Polaris did not consistently validate storage locations supplied during table and view registration.

Apache Polaris did not consistently validate storage locations supplied during table and view registration. An authenticated principal with permission to register a table or view could, depending on the affected release and registration…

▾ Twilightapache-polaris · apache-polarisEPSS 0.37%via OSV