- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 3 · 3 high
- Registry
- Maven Central
Advisories 3
- CVE-2026-62391High 8.1
Apache Kyuubi: kyuubi.session.local.dir.allow.list bypass via unprefixed Spark file-conf aliases
Affected: from 1.6.0, fixed in 1.12.0.
- CVE-2026-23904High 7.3
Apache Kyuubi: Unrestricted access via Kyuubi engine-ui proxy
Affected: from 1.8.0, fixed in 1.12.0.
- CVE-2025-66518High 8.8
Apache Kyuubi: Unauthorized directory access due to missing path normalization
Affected: from 1.6.0, through 1.10.2.