Apache Pulsar Manager is no longer maintained and is completely unsupported. There are no supported versions, and no further releases, fixes or security updates will be made for any version.
Using Pulsar Manager is not recommended. If you run it, remove the deployment and move to one of the alternatives described in the Administration UI documentation.
The Apache Pulsar PMC does not acknowledge or process new security findings for Pulsar Manager, and asks that no new findings be reported for it. Reports about Pulsar Manager will not be investigated, fixed or assigned CVE identifiers.
This applies only to Pulsar Manager. For maintained Apache Pulsar projects, the Apache Pulsar security policy applies. Pulsar Manager is not covered by that policy.