Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.apache.zeppelin:zeppelin-interpreter

3 known vulnerabilities (1 critical, 1 high, 1 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 critical, 1 high, 1 medium
Registry
Maven Central

Advisories 3

  • Apache Zeppelin: raft directory listing and file read

    Affected: from 0.10.1, fixed in 0.12.0.

  • CVE-2024-31868Medium 6.1

    Apache Zeppelin: XSS vulnerability in the helium module

    Affected: from 0.8.2, fixed in 0.11.1; from 0.8.2, fixed in 0.11.1.

  • CVE-2024-31866Critical 9.8

    Apache Zeppelin: Interpreter download command does not escape malicious code injection

    Affected: from 0.8.2, fixed in 0.11.1; from 0.8.2, fixed in 0.11.1.