org.apache.oozie:oozie-main vulnerabilities

CVEs whose affected-version data names the org.apache.oozie:oozie-main package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119641None

3d ago

Apache Oozie: workflow rerun bypasses the per-job ACL and reassigns ownership

** UNSUPPORTED WHEN ASSIGNED ** Improper input validation vulnerability in Apache Oozie. An authenticated Oozie user can reconfigure another tenant's workflow job and change its ownership. This issue affects Apache Oozie: all versions…

▾ SunlitApache Software Foundation · org.apache.oozie:oozie-mainEPSS 0.22%via CVEORG