Google Git
Sign in
apache/solr-site/HEAD
  1. 2e55084 Merge pull request #197 from apache/dependabot/github_actions/actions/checkout-7.0.0 by Eric Pugh · 3 days ago main
  2. 0e3a2b3 Merge pull request #208 from apache/dependabot/pip/setuptools-83.0.0 by Eric Pugh · 3 days ago
  3. 91c0231 Merge pull request #173 from apache/Update-vex by Eric Pugh · 3 days ago
  4. d6ff765 Update dependencies napping for new jars. by Eric Pugh · 3 days ago Update-vex
  5. 9e6d39f Filter out shaded code that doesn't actually ship. It conflicts between our licenses listing and what syft finds and is a false positive. by Eric Pugh · 3 days ago
  6. defafdc Convert older json content into our vex statement markdown. Expanded versions to be accurate. by Eric Pugh · 4 days ago
  7. 9f1690d Merge remote-tracking branch 'upstream/main' into Update-vex by Eric Pugh · 4 days ago
  8. 6bb7666 Merge pull request #204 from epugh/add_openvex_support by Eric Pugh · 4 days ago
  9. c37e54c Merge remote-tracking branch 'upstream/main' into Update-vex by Eric Pugh · 4 days ago
  10. cb01a37 Document the vex steps. by Eric Pugh · 5 days ago
  11. a49ddfd strip out the scanning of -slim version of solr, that doesn't help us at all! by Eric Pugh · 5 days ago
  12. 2e3ba6c Reduces future error of omission by building in updating this as part of regen fro solr 9 and later releases. Pre 9 is static. by Eric Pugh · 5 days ago
  13. b22617a Nicer variable name, be clear what we are doing. by Eric Pugh · 5 days ago
  14. 0c10098 Bump setuptools from 82.0.1 to 83.0.0 by dependabot[bot] · 9 days ago
  15. 194b79d Merge remote-tracking branch 'upstream/main' into add_openvex_support by Eric Pugh · 12 days ago
  16. 56554be Merge remote-tracking branch 'upstream/main' into add_openvex_support by Eric Pugh · 12 days ago
  17. 1752d80 Merge pull request #205 from epugh/add_lower_bounds_to_versions by Eric Pugh · 12 days ago
  18. 9180c4c Merge pull request #206 from epugh/add_netty_cves by Eric Pugh · 12 days ago
  19. 2301713 Demonstate using 'syft' tool to generate sbom that populates the solr version mapping file. by Eric Pugh · 12 days ago
  20. 9fdcc3a modules: solr-core or solr-solrj support. Omitting means solr-core. by Eric Pugh · 2 weeks ago
  21. 55d1658 Eliminate hardcoded JAR_GROUPS by using the current generated file. by Eric Pugh · 2 weeks ago
  22. b636c0e Be more explicit about zk and ssl... by Eric Pugh · 2 weeks ago
  23. 511e2a7 Provide more detailed history of netty in Solr, looking back at the netty-all uber jar. by Eric Pugh · 2 weeks ago
  24. 358e841 as part of adding more netty cves, we added more of these mappings. Ugh. by Eric Pugh · 2 weeks ago
  25. 870c9e3 Document Netty CVE's impact on Solr by Eric Pugh · 2 weeks ago
  26. 481d358 Document how to use vex files with docker scout command. by Eric Pugh · 2 weeks ago
  27. d8b2ecc Openvex file being generated, though with hardcoded mappings. by Eric Pugh · 2 weeks ago
  28. 6d315d9 Refine the VEX files to have specific jars and specific begin/end versions. by Eric Pugh · 2 weeks ago
  29. 8257a48 Merge pull request #199 from apache/dependabot/pip/beautifulsoup4-4.15.0 by Eric Pugh · 2 weeks ago
  30. 823a703 Merge pull request #202 from apache/dependabot/pip/pip-26.1.2 by Eric Pugh · 2 weeks ago
  31. 1369d33 Merge pull request #203 from apache/dependabot/pip/soupsieve-2.8.4 by Eric Pugh · 2 weeks ago
  32. a463d3b List out each version of Solr that a VEX statement applies to. Only works with lower bounded statements. by Eric Pugh · 3 weeks ago
  33. 64f0f83 Generate openvex from our cyclonedx inspired vex files. by Eric Pugh · 3 weeks ago
  34. 112478f Merge pull request #200 from epugh/cves_in_jetty_10 by Eric Pugh · 3 weeks ago
  35. 5e06326 Bump soupsieve from 2.8.3 to 2.8.4 by dependabot[bot] · 3 weeks ago
  36. dfb8968 Bump pip from 26.1 to 26.1.2 by dependabot[bot] · 3 weeks ago
  37. d68c862 the way to mitifate this bug is at the proxy layer by Eric Pugh · 5 weeks ago
  38. d4f1753 We require that vulnerabilties be exploitable against a secure Solr setup, and so this issue can be marked not exploitable when you have secure solr by Eric Pugh · 5 weeks ago
  39. 08df1df VEX statements for CVEs affecting Jetty 10 in Solr 9 by Eric Pugh · 5 weeks ago
  40. 1d00046 Bump beautifulsoup4 from 4.14.3 to 4.15.0 by dependabot[bot] · 5 weeks ago
  41. 368b19e Bump actions/checkout from 6.0.3 to 7.0.0 by dependabot[bot] · 5 weeks ago
  42. 127ea72 Add docs button to menus and fix operator docs links (#190) by Houston Putman · 6 weeks ago
  43. 289d270 Merge pull request #196 from epugh/bump_cyclonedx_version_statement by Eric Pugh · 6 weeks ago
  44. 84841e7 bumped the version we are using by Eric Pugh · 6 weeks ago
  45. 634dd7e Merge pull request #152 from ppkarwasz/fix/CVE-2025-48924_commons-lang by Eric Pugh · 6 weeks ago
  46. aa91d0f Document commons lang vulnerablity by Eric Pugh · 6 weeks ago
  47. b5cc498 Merge remote-tracking branch 'upstream/main' into pr/152 by Eric Pugh · 6 weeks ago
  48. 282e8ad Merge pull request #194 from apache/dependabot/pip/tornado-6.5.7 by Eric Pugh · 6 weeks ago
  49. 2017b38 Merge pull request #191 from epugh/vex-table-list-all by Eric Pugh · 6 weeks ago
  50. 705f8dd Merge pull request #192 from epugh/add_opennlp_cve_as_vex by Eric Pugh · 6 weeks ago
  51. 30ae5da Merge branch 'add_opennlp_cve_as_vex' of github.com:epugh/solr-site into add_opennlp_cve_as_vex by Eric Pugh · 6 weeks ago
  52. 8d3cf0f provide more accurate state of play message, that will be updated again when integrated into solr by Eric Pugh · 6 weeks ago
  53. 9b7cd51 Potential fix for pull request finding by Eric Pugh · 6 weeks ago
  54. 9c8e961 Merge pull request #193 from epugh/update_vex_status by Eric Pugh · 6 weeks ago
  55. 0a709bb we dont need the jira issue by Eric Pugh · 6 weeks ago
  56. aa45b06 Potential fix for pull request finding by Eric Pugh · 6 weeks ago
  57. 6c25d05 Merge pull request #195 from vex-generation-toolset/vex/log4j-april-2026 by Eric Pugh · 6 weeks ago
  58. f302bc6 make sure to only show Vex entries for dependencies, not Solr itself, they go in the main security page by Eric Pugh · 7 weeks ago
  59. 19ffc4e refine the versions of Solr that vex entries apply to by Eric Pugh · 7 weeks ago
  60. 0e33e73 SOLR-18288: Link April 2026 Log4j VEX statements to JIRA issue by Piotr P. Karwasz · 7 weeks ago
  61. a82ecbc SOLR-18288: Fix MapMessage family description in CVE-2026-34481 VEX by Piotr P. Karwasz · 7 weeks ago
  62. f77e1eb fix: extend statements to Solr `10.0.0` by Piotr P. Karwasz · 7 weeks ago
  63. 10132d9 SOLR-18288: VEX statements for the April 2026 Apache Log4j CVEs by Piotr P. Karwasz · 7 weeks ago
  64. 1843a36 Bump tornado from 6.5.5 to 6.5.7 by dependabot[bot] · 7 weeks ago
  65. cb5409a refine why this jar trips up scanners by Eric Pugh · 7 weeks ago
  66. 83d7bfa this is too undefined, and really isnt a vex file by Eric Pugh · 7 weeks ago
  67. b1e105d align this rather generic issue to follow our vex pattern more closely by Eric Pugh · 7 weeks ago
  68. 43097c0 With AI support, update the open ended versions to being close ended. by Eric Pugh · 7 weeks ago
  69. 477d81b add OpenNLP CVE Vex files by Eric Pugh · 7 weeks ago
  70. 6b82b6e we don't need the extra details... by Eric Pugh · 7 weeks ago
  71. 830f8c4 List all VEX entries in the CVE table with a status tag by Eric Pugh · 7 weeks ago
  72. 41ff6fa Make Solr Operator ref guide available (#188) by Houston Putman · 7 weeks ago
  73. 1496751 Merge pull request #153 from ppkarwasz/feat/vex-plugin by Eric Pugh · 8 weeks ago
  74. 007b73d Simplify vex file by Eric Pugh · 8 weeks ago
  75. e24dce4 We are now on 1.6 spec version by Eric Pugh · 8 weeks ago
  76. 770def5 Add similar ghsa linking as for cve by Eric Pugh · 8 weeks ago
  77. ce92d4a Support GHSA and CVE links. by Eric Pugh · 8 weeks ago
  78. 70a056c Potential fix for pull request finding by Eric Pugh · 8 weeks ago
  79. 3ed5a65 Remove custom code. by Eric Pugh · 8 weeks ago
  80. adaac50 Integrate validation of vex markdown files. Refactor link creation by Eric Pugh · 8 weeks ago
  81. 1ff981b Rename vex files with date source from git history. by Eric Pugh · 8 weeks ago
  82. c9266ec Link to detailed view of each vex from the security dependency table. by Eric Pugh · 8 weeks ago
  83. 2ef0f4c Remove vulnerable_component/impacted_components metadata by Eric Pugh · 8 weeks ago
  84. 1f9ac55 Move to using .md files with front matter instead of JSON. by Eric Pugh · 8 weeks ago
  85. fc776f6 Now properly parsing the vex .md files frontmatter. by Eric Pugh · 8 weeks ago
  86. e758c6c Merge remote-tracking branch 'upstream/main' into pr/153 by Eric Pugh · 8 weeks ago
  87. f84b24f Use the CycloneDX version, not OpenVex version by Eric Pugh · 8 weeks ago
  88. 2b2c4ab Merge remote-tracking branch 'upstream/main' into Update-vex by Eric Pugh · 8 weeks ago
  89. c6f9c09 Merge pull request #187 from apache/dependabot/github_actions/actions/checkout-6.0.3 by Jan Høydahl · 9 weeks ago
  90. ee21c82 Merge pull request #186 from apache/dependabot/docker/python-5a824eb by Jan Høydahl · 9 weeks ago
  91. 1127fce Bump actions/checkout from 6.0.2 to 6.0.3 by dependabot[bot] · 9 weeks ago
  92. 35405f9 Bump python from `dd4d2bd` to `5a824eb` by dependabot[bot] · 9 weeks ago
  93. 23a2797 Add comparison harness link to Solr/Lucene migration post (#185) by parveensaini · 2 months ago
  94. 19a6327 Merge pull request #184 from apache/bump-pelican-workflows by Jan Høydahl · 2 months ago
  95. 87f6b91 Bump pelican version in workflows to 4.12.0 by Jan Høydahl · 2 months ago
  96. 9cb5774 Bump idna from 3.11 to 3.15 (#182) by dependabot[bot] · 2 months ago
  97. 85eade4 Change sub header title from "Recent CVE Disclosures for Apache Solr" to "Recent Security Advisories for Apache Solr" by Jan Høydahl · 2 months ago
  98. 0c7186c Security advisory for jwt-auth blockunknown (#181) by Jan Høydahl · 2 months ago
  99. 055c914 Bump pelican from 4.11.0.post0 to 4.12.0 (#177) by dependabot[bot] · 3 months ago
  100. 51c7b23 Fix bloghome template broken by Pelican 4.12.0 (#180) by Jan Høydahl · 3 months ago