Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.druid:druid-core

3 known vulnerabilities, with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3
Registry
Maven Central

Advisories 3

  • fast-xml-parser before 4.1.2 allows proto for Prototype Pollution.

    Affected: fixed in 0.21.0.

  • Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of…

    Affected: fixed in 0.22.0.

  • Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended

    Affected: fixed in 0.21.0.