CVE-2026-64640
1 advisory.
PyPI/apache-polaris CVE-2026-64640: unknown, EPSS 0.49%
Apache Polaris did not consistently validate storage locations supplied during table and view registration.
Action: Upgrade apache-polaris to 1.7.0 or later.
pip install apache-polaris==1.7.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.7.0 | - |
Fixed versions
| 1.7.0 |
Sources
- osv: PYSEC-2026-3623
- http://www.openwall.com/lists/oss-security/2026/08/06/7
- https://lists.apache.org/thread/scd8p9wy8b9j3om5wohbotpfycnmmjl4
CVE-2026-64640 · published · modified · JSON