Apache YuniKorn

Search everything

Mentions · 7d0
Mentions · 30d0
All mentions3
First seenOct 7, 2026
Last mentionedOct 7, 2026

Timeline

3 articles · newest first

CVE-2026-97146: Apache YuniKorn: Admission control bypass via system label forgery

Apache YuniKorn before 1.10.0 lets privileged users bypass admission checks by forging the app=yunikorn label.

oss-securityOct 7, 07:10 UTC · Oct 7, 2026Vulnerability 3 sourcesCVE-2026-971463 · 1 read

CVE-2026-92393: Apache YuniKorn: Admission control bypass via workload UPDATE operation

Apache YuniKorn before 1.10.0 skips admission checks when workloads are updated, rated CVSS 2.0.

oss-securityOct 7, 07:08 UTC · Oct 7, 2026Vulnerability 3 sourcesCVE-2026-923932

CVE-2026-78243: Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

Apache YuniKorn's LDAP group resolver can panic on a lowercase memberOf attribute before version 1.10.0.

oss-securityOct 7, 07:06 UTC · Oct 7, 2026Vulnerability 3 sourcesCVE-2026-782432 · 1 read

Related CVEs

by mentions

CVE-2026-971464.8
Admission-control bypass in Apache YuniKorn via label forgery
published Oct 7, 2026Apache Software Foundation YuniKorn
CVE-2026-782432.1
LDAP group resolver crash in Apache YuniKorn
published Oct 7, 2026Apache Software Foundation Apache YuniKorn
CVE-2026-923932.0
Workload UPDATE admission bypass in Apache YuniKorn
published Oct 7, 2026Apache YuniKorn

Appears with

Apache Software Foundationorganization · 3
Apachevendor · 3

Entities are extracted by the model from each article. First seen Oct 7, 2026, last mentioned Oct 7, 2026. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.