CLEANSTART-2026-YI17709 Security fix for CVE-2025-33042 applied in: apache-hive 4.0.1-r11, apache-hive 4.1.0-r7, apache-hive 4.2.0-r11, wavefront-proxy 13.9-r0

CVE-2025-33042 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

Oracle GoldenGate for Big Data Multiple Vulnerabilities 21.x < 21.22.0.0.0 (April 2026 CPU)

According to its self-reported version number, the Oracle GoldenGate for Big Data application located on the remote host is affected by multiple vulnerabilities: - Vulnerability in the Oracle GoldenGate Big Data and Application Adapters product of Oracle GoldenGate component: Java Delivery Netty...

Security Bulletin: IBM Terracotta is affected by an Apache Avro vulnerability that could allow code injection leading to access to unauthorized resources

Summary IBM Terracotta uses Apache Avro as part of Apache Parquet used within the IBM Terracotta implementation for data export and import. Vulnerability Details CVEID:CVE-2025-33042 DESCRIPTION: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when...

CVE-2025-33042 vulnerabilities

Vulnerabilities for packages: hadoop-fips, druid, pinot, spark-fips, kafbat-ui, kafbat-ui-fips, logstash, apache-hop-fips, wavefront-proxy, spark, apache-hop, celeborn, akhq...

CVE-2025-33042 Apache Avro Java SDK: Code injection on Java generated code

Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 o...

CVE-2025-33042

creationtimestamp| type| source ---|---|--- 2026-02-12 17:51:10+00:00| seen| https://seclists.org/oss-sec/2026/q1/163 2026-02-14 18:40:27+00:00| seen| https://gist.github.com/alon710/d740d9b4112d3738012c072f4e9cd15d 2026-02-14 19:00:35+00:00| seen|...