io.nstream:nstream-adapter-druid (>=4.8.15 <=4.15.23) potentially affected by CVE-2025-59390 via org.apache.druid:druid (=29.0.1)

org.apache.druid:druid MAVEN version =29.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.druid:druid and may be impacted: - io.nstream:nstream-adapter-druid =4.8.15, =4.15.23 Source cves: CVE-2025-59390 Source advisory:...

CVE-2025-59390

creationtimestamp| type| source ---|---|--- 2025-11-26 04:25:20+00:00| seen| https://seclists.org/oss-sec/2025/q4/206 2025-11-26 05:43:48+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3m6j5kpashq2v 2025-11-26 10:28:50+00:00| seen|...