Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.streampipes:streampipes-parent

6 known vulnerabilities (3 high, 3 medium), with the versions each affects and the releases that fix them.

Latest release
0.98.0 (Nov 28, 2025): no advisory affects it
Newest unaffected release
0.98.0 (Nov 28, 2025), the latest release
Advisories
6 · 3 high, 3 medium
Dependents
0
Releases
13 since 0.66.0 (May 5, 2020)
Registry
Maven Central
Releases read
Nov 8, 2026

Version timeline

Every release cve.now has on record, lowest version on the left; each bar is a run of versions an advisory affects.

Advisories 6

  • Apache StreamPipes: Leverage of User ID for Privilege Escalation

    Affected: from 0.69.0, fixed in 0.98.0.

    Fixed in 0.98.0 (released Nov 28, 2025, 34 days before disclosure).

    The latest release, 0.98.0, is not affected.

  • CVE-2024-24778Medium 6.5

    Apache StreamPipes: Resources Permission Escalation

    Affected: fixed in 0.97.0.

    Fixed in 0.97.0 (released Feb 6, 2025, 25 days before disclosure).

    The latest release, 0.98.0, is not affected.

  • CVE-2024-31411Medium 6.0

    Apache StreamPipes: Potential remote code execution (RCE) via file upload

    Affected: fixed in 0.95.0.

    Fixed in 0.95.0 (released Jun 3, 2024, 44 days before disclosure).

    The latest release, 0.98.0, is not affected.

  • Apache StreamPipes: Possibility of SSRF in pipeline element installation process

    Affected: fixed in 0.95.0.

    Fixed in 0.95.0 (released Jun 3, 2024, 44 days before disclosure).

    The latest release, 0.98.0, is not affected.

  • CVE-2024-30471Medium 5.3

    Apache StreamPipes: Potential creation of multiple identical accounts

    Affected: fixed in 0.95.0.

    Fixed in 0.95.0 (released Jun 3, 2024, 44 days before disclosure).

    The latest release, 0.98.0, is not affected.

  • Apache StreamPipes: Privilege escalation through non-admin user

    Affected: from 0.69.0, fixed in 0.92.0.

    Fixed in 0.92.0 (released Jun 9, 2023, 14 days before disclosure).

    The latest release, 0.98.0, is not affected.