I can confirm that Pulsar is exploitable with CVE-2021-44228 .
I'd like to propose releasing apache/pulsar-helm-chart after the workaround
for CVE-2021-44228, PR https://github.com/apache/pulsar-helm-chart/pull/186
has been merged.

Is it possible to expedite the decision about releasing this? I'm a
volunteer for making the release.

BR, Lari


More details about CVE-2021-44228 in the email thread
https://lists.apache.org/thread/pf8wfzt09c2dv4z291httlgdwtc1495c .

Reply via email to