{"action":"Upgrade apache-polaris to 1.7.0 or later.","affected":[{"fixed":"1.7.0","introduced":"0"}],"component":"apache-polaris","cve_ids":["CVE-2026-64640"],"ecosystem":"PyPI","epss":0.00486,"exploited":false,"fixed_versions":["1.7.0"],"id":"tcs_01M5KH6DGF71Z5DH8MP3Y7S4QC","modified_at":"2026-08-07T09:45:09.917157154Z","published_at":"2026-08-06T09:16:36.797Z","references":["https://osv.dev/vulnerability/PYSEC-2026-3623","http://www.openwall.com/lists/oss-security/2026/08/06/7","https://lists.apache.org/thread/scd8p9wy8b9j3om5wohbotpfycnmmjl4"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2026-3623","url":"https://osv.dev/vulnerability/PYSEC-2026-3623"}],"summary":"Apache Polaris did not consistently validate storage locations supplied during table and view registration."}