Apache Yunikorn (Apache Software Foundation) - vulnerabilities (CVEs)

3 CVEs, 3 in the last 30 days, 1 known versions, newest CVE from 2026-10-07. Vendor: Apache Software Foundation.

CVEs of Apache Yunikorn

• CVE-2026-97146 - CVSS 4.8 (medium), 2026-10-07: Apache YuniKorn 1.9.0 and earlier allows bypassing the check for the user annotation by setting a secondary label on the pod. If the pod has the label…
• CVE-2026-78243 - CVSS 2.1 (low), 2026-10-07: Apache YuniKorn 1.8.0 and later, if configured with the LDAP group resolver, crashes due to an out of bounds read processing group membership entries.If the…
• CVE-2026-92393 - CVSS 2 (low), 2026-10-07: Apache YuniKorn 1.9.0 and earlier does not implement label and user annotation checks for workload UPDATE action bypassing all checks. Workloads in YuniKorn…