Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.helix:helix-rest

2 known vulnerabilities (1 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
2.0.1 (Jun 30, 2026): no advisory affects it
Newest unaffected release
2.0.1 (Jun 30, 2026), the latest release
Advisories
2 · 1 critical, 1 high
Dependents
0
Releases
29 since 0.8.0 (Jan 31, 2018)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 2

  • Apache Helix REST: Permissive CORS Configuration in REST API Allows Unrestricted Cross-Origin

    Affected: through 2.0.0.

    Fixed in 2.0.1 (released Jun 30, 2026, 9 days before disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 2.0.1, is not affected.

  • CVE-2023-38647Critical 9.8

    Apache Helix: Deserialization vulnerability in Helix workflow and REST

    Affected: fixed in 1.3.0.

    Fixed in 1.3.0 (released Jul 22, 2023, 4 days before disclosure).

    The latest release, 2.0.1, is not affected.