Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.calcite:calcite-core

3 known vulnerabilities (1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 medium
Registry
Maven Central

Advisories 3

  • CVE-2026-46718Medium 6.5

    Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution

    Affected: from 1.5.0, fixed in 1.42; from 1.5.0, fixed in 1.42.0.

  • Apache Calcite: potential XEE attacks

    Affected: from 1.22.0, fixed in 1.32.0.

  • HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to…

    Affected: fixed in 1.26.0.