Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache YuniKorn

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.1
    CVE-2026-78243

    Apache YuniKorn: LDAP Group provider panics on lowercase attribute name

    Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the LDAP server returns a group membership entry, memberOf attribute, for a user specified in the pod the …

    Apache Software Foundation Apache YuniKorn
  • Low 2.0
    CVE-2026-92393

    Apache YuniKorn: Admission control bypass via workload UPDATE operation

    Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn are defined as the following Kubernetes objects: "deployments", "replicasets", "statefulsets", "daemon…

    Apache Software Foundation Apache YuniKorn