Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.hive:hive-serde

1 known vulnerability (1 critical), with the versions each affects and the releases that fix them.

Latest release
4.2.1 (Aug 25, 2026): no advisory affects it
Newest unaffected release
4.2.1 (Aug 25, 2026), the latest release
Advisories
1 · 1 critical
Dependents
112
Releases
45 since 0.8.0 (Dec 13, 2011)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 1

  • CVE-2026-55976Critical 9.1

    Apache Hive: SSRF vulnerability in Hive Avro Serde due to Insufficient input validation on avro.schema.url

    Affected: from 2.1.0, through 4.2.0.

    Fixed in 4.2.1 (released Aug 25, 2026, the day of disclosure), the first release outside every affected range (no listed fixed version clears them all).

    The latest release, 4.2.1, is not affected.