Google Git Google Git
Sign in
apache/solr-site/HEAD
  1. 7c811e2 Adding Solr news for release 10.1.0 by Andrzej Białecki · 2 days ago main
  2. 42c1911 Update the htaccess.ref-guide-antora for release 10.1.0 by Andrzej Białecki · 3 days ago
  3. c467302 Update version variables for release 10.1.0 by Andrzej Białecki · 3 days ago
  4. 754359f Merge pull request #245 from epugh/update_for_9_11 by Eric Pugh · 2 weeks ago
  5. 6c20d47 Remove redundant Visual Guide link from resources page (#201) by David Smiley · 3 weeks ago
  6. 99dce31 Merge pull request #246 from janhoy/local-tika-removal-notice by Jan Høydahl · 4 weeks ago
  7. 13b1775 Add news item about 'local' Tika removal in Solr 9.11 by Jan Høydahl · 4 weeks ago
  8. 221d44d Resolve every remaining .x wildcard in VEX version ranges to explicit endpoints. by Eric Pugh · 4 weeks ago
  9. d4d34dc Backfill the missing Solr 8.8.2-8.11.4 releases. by Eric Pugh · 4 weeks ago
  10. 97bc43f Fix incorrect claim that Tika remains in-process in Solr 9.11.0. by Eric Pugh · 4 weeks ago
  11. 73aa2f2 Add missing VEX entry for CVE-2025-66516 (SOLR-17888, XFA/XXE in SolrCell PDF parsing). by Eric Pugh · 4 weeks ago
  12. 3ab5823 Resolve VEX affected-version ranges against the Solr 9.11.0 release. by Eric Pugh · 4 weeks ago
  13. 720c7da Add new version of Solr + its dependencies. by Eric Pugh · 4 weeks ago
  14. a947f88 Add the exec bit to the file. by Eric Pugh · 4 weeks ago
  15. 8581670 Adding Solr news for release 9.11.0 by David Smiley · 4 weeks ago
  16. 249e015 Update the htaccess.ref-guide-antora for release 9.11.0 by David Smiley · 4 weeks ago
  17. 20c5182 Update version variables for release 9.11.0 by David Smiley · 4 weeks ago
  18. 9d76954 Merge pull request #239 from iprithv/blog-walking-document-graphs by Eric Pugh · 7 weeks ago
  19. 193c187 walking document graphs in Apache Solr by prithvi · 8 weeks ago
  20. 9fa7581 Merge pull request #237 from apache/dependabot/pip/tornado-6.5.8 by Eric Pugh · 9 weeks ago
  21. 18cd890 Bump tornado from 6.5.7 to 6.5.8 by dependabot[bot] · 9 weeks ago
  22. 4b62dec Merge pull request #232 from epugh/add_github_vulnerabilities_as_vex by Eric Pugh · 9 weeks ago
  23. b6e01be Merge pull request #235 from apache/dependabot/pip/pip-tools-7.6.1 by Eric Pugh · 9 weeks ago
  24. 6f81e41 Merge pull request #236 from apache/dependabot/pip/markdown-3.10.3 by Eric Pugh · 9 weeks ago
  25. 67929cf Bump markdown from 3.10.2 to 3.10.3 by dependabot[bot] · 9 weeks ago
  26. 99b9866 Bump pip-tools from 7.6.0 to 7.6.1 by dependabot[bot] · 9 weeks ago
  27. 13b48cc Merge pull request #231 from epugh/SOLR-17826 by Eric Pugh · 10 weeks ago
  28. e1a3c51 add additonal cves that github flags. by Eric Pugh · 10 weeks ago
  29. 1c37465 docuemnt when the flaw existed. by Eric Pugh · 2 months ago
  30. c8af5c0 Merge pull request #230 from epugh/fix-regen-shaded-guava by Eric Pugh · 3 months ago
  31. 05b33dd rebuilt dependencies plus enhance script. by Eric Pugh · 3 months ago
  32. e329183 Fix regenerator: don't count a repackaged jar's embedded Maven metadata as the artifact by Eric Pugh · 3 months ago
  33. fb48899 Merge pull request #229 from epugh/SOLR-17825-beanutils-range by Eric Pugh · 3 months ago
  34. 73b3893 Cap CVE-2025-48734 (commons-beanutils) range at 9.10.1/10.0.0 (fixed in 9.11/10.1) by Eric Pugh · 3 months ago
  35. d9452fe Merge pull request #223 from epugh/SOLR-10702 by Eric Pugh · 3 months ago
  36. e2e945c Merge pull request #228 from epugh/SOLR-18013-lz4-vex by Eric Pugh · 3 months ago
  37. 1034b61 Split lz4-java CVEs by fix boundary; emit real org.lz4 purl by Eric Pugh · 3 months ago
  38. c36e834 Merge pull request #220 from epugh/SOLR-18013 by Eric Pugh · 3 months ago
  39. e5ad2f7 Merge pull request #221 from epugh/SOLR-16309 by Eric Pugh · 3 months ago
  40. 54850f4 Merge pull request #227 from epugh/split-jackson-2026-cves by Eric Pugh · 3 months ago
  41. bb6759e Split bundled 2026 jackson-databind VEX entry into per-CVE files with accurate ranges by Eric Pugh · 3 months ago
  42. 487c757 Merge pull request #219 from epugh/SOLR-18333 by Eric Pugh · 3 months ago
  43. 755853a Merge pull request #226 from epugh/refine-jackson-gadget-cve-range by Eric Pugh · 3 months ago
  44. 3be4282 Refine jackson-databind gadget CVE range to 4.7.0-8.6.3 by Eric Pugh · 3 months ago
  45. 51003dc Merge pull request #218 from epugh/SOLR-17236 by Eric Pugh · 3 months ago
  46. 028f626 Merge pull request #225 from epugh/SOLR-15507-thrift-range by Eric Pugh · 3 months ago
  47. 0892a5a Correct CVE-2020-13949 (thrift) affected range to 8.2.0-8.11.0 by Eric Pugh · 3 months ago
  48. 80f04a5 Merge pull request #222 from epugh/SOLR-15507 by Eric Pugh · 3 months ago
  49. dd7b2f1 Merge pull request #224 from epugh/SOLR-17900-narrow-ranges by Eric Pugh · 3 months ago
  50. 8f50c78 Dug back in, and yeah, it was too broad. by Eric Pugh · 3 months ago
  51. 990c7a0 Merge pull request #216 from epugh/SOLR-17900 by Eric Pugh · 3 months ago
  52. 1b587c5 Merge pull request #217 from epugh/vex-openvex-per-cve-statements by Eric Pugh · 3 months ago
  53. 559bf77 Merge pull request #215 from epugh/SOLR-17899 by Eric Pugh · 3 months ago
  54. 36dd34c Merge pull request #214 from epugh/SOLR-17901 by Eric Pugh · 3 months ago
  55. 74b6fd0 Merge pull request #212 from epugh/SOLR-17903-poi-cve by Eric Pugh · 3 months ago
  56. 311e206 Document that in 9.0 and 9.1 we had exploitable CVE by Eric Pugh · 3 months ago
  57. 4a8b0a0 docuemnt that this was fixed "back in the day" by Eric Pugh · 3 months ago
  58. c15f7ca document the jquery-ui CVE applicablity. by Eric Pugh · 3 months ago
  59. 3e9a8be Expand existing file with additional CVES by Eric Pugh · 3 months ago
  60. f888daa Document the CVE, it's already partly covered in this existing file by Eric Pugh · 3 months ago
  61. 9f1ba6a Expand the details to link to a Solr JIRA that highlights the same issue. by Eric Pugh · 3 months ago
  62. 6ca22d4 Enhance OpenVEX generator so that aliases are expanded into the one statement per id for suppression by Eric Pugh · 3 months ago
  63. f1cc11a Hadoop client CVEs, expand on one existing, add four new ones. SOLR-17900 by Eric Pugh · 3 months ago
  64. 09cedf1 Document the impact of these cves on Solr by Eric Pugh · 3 months ago
  65. 9e5e489 Document that solr is not vulnerable to CVE-2024-21742 apache-mimej-core by Eric Pugh · 3 months ago
  66. fbf7980 Merge remote-tracking branch 'upstream/main' into SOLR-17903-poi-cve by Eric Pugh · 3 months ago
  67. 7557fdd Merge pull request #213 from epugh/sort-vex-dependency-versions by Eric Pugh · 3 months ago
  68. 80f3dc9 reduce churn in this file by making sure keys are sorted properly as we add new information. by Eric Pugh · 3 months ago
  69. 7004966 Describe why this CVE is not an issue for Solr by Eric Pugh · 3 months ago
  70. 175c0d9 Merge pull request #211 from epugh/reviewing_remaining_cves by Eric Pugh · 3 months ago
  71. 00c9d74 Refine the OpenNLP ranges as these are fixed by Eric Pugh · 3 months ago
  72. 2918942 Add vex statement that moves from in_triage to not_affected. by Eric Pugh · 3 months ago
  73. 10ace04 Add remaining statements that cover current 9.11 and 10.1 snapshot docker image builds. by Eric Pugh · 3 months ago
  74. 809adea Merge pull request #198 from apache/dependabot/docker/python-2673086 by Jan Høydahl · 3 months ago
  75. a28d3b1 Merge pull request #209 from apache/dependabot/github_actions/actions/checkout-7.0.1 by Jan Høydahl · 3 months ago
  76. 9d1c5c5 Merge pull request #210 from apache/dependabot/pip/pip-tools-7.6.0 by Jan Høydahl · 3 months ago
  77. 7072ca6 Bump pip-tools from 7.5.3 to 7.6.0 by dependabot[bot] · 3 months ago
  78. 8bffc69 Bump actions/checkout from 7.0.0 to 7.0.1 by dependabot[bot] · 3 months ago
  79. 2e55084 Merge pull request #197 from apache/dependabot/github_actions/actions/checkout-7.0.0 by Eric Pugh · 3 months ago
  80. 0e3a2b3 Merge pull request #208 from apache/dependabot/pip/setuptools-83.0.0 by Eric Pugh · 3 months ago
  81. 91c0231 Merge pull request #173 from apache/Update-vex by Eric Pugh · 3 months ago
  82. d6ff765 Update dependencies napping for new jars. by Eric Pugh · 3 months ago Update-vex
  83. 9e6d39f Filter out shaded code that doesn't actually ship. It conflicts between our licenses listing and what syft finds and is a false positive. by Eric Pugh · 3 months ago
  84. defafdc Convert older json content into our vex statement markdown. Expanded versions to be accurate. by Eric Pugh · 3 months ago
  85. 9f1690d Merge remote-tracking branch 'upstream/main' into Update-vex by Eric Pugh · 3 months ago
  86. 6bb7666 Merge pull request #204 from epugh/add_openvex_support by Eric Pugh · 3 months ago
  87. c37e54c Merge remote-tracking branch 'upstream/main' into Update-vex by Eric Pugh · 3 months ago
  88. cb01a37 Document the vex steps. by Eric Pugh · 3 months ago
  89. a49ddfd strip out the scanning of -slim version of solr, that doesn't help us at all! by Eric Pugh · 3 months ago
  90. 2e3ba6c Reduces future error of omission by building in updating this as part of regen fro solr 9 and later releases. Pre 9 is static. by Eric Pugh · 3 months ago
  91. b22617a Nicer variable name, be clear what we are doing. by Eric Pugh · 3 months ago
  92. 0c10098 Bump setuptools from 82.0.1 to 83.0.0 by dependabot[bot] · 3 months ago
  93. 194b79d Merge remote-tracking branch 'upstream/main' into add_openvex_support by Eric Pugh · 3 months ago
  94. 56554be Merge remote-tracking branch 'upstream/main' into add_openvex_support by Eric Pugh · 3 months ago
  95. 1752d80 Merge pull request #205 from epugh/add_lower_bounds_to_versions by Eric Pugh · 3 months ago
  96. 9180c4c Merge pull request #206 from epugh/add_netty_cves by Eric Pugh · 3 months ago
  97. 2301713 Demonstate using 'syft' tool to generate sbom that populates the solr version mapping file. by Eric Pugh · 3 months ago
  98. 9fdcc3a modules: solr-core or solr-solrj support. Omitting means solr-core. by Eric Pugh · 3 months ago
  99. 55d1658 Eliminate hardcoded JAR_GROUPS by using the current generated file. by Eric Pugh · 3 months ago
  100. b636c0e Be more explicit about zk and ssl... by Eric Pugh · 4 months ago