Vulnerabilities in Apache Pulsar 2.7.4