456 matches found
Apache Druid - Local File Inclusion
Apache Druid ingestion system is vulnerable to local file inclusion. The InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of t...
CVE-2026-54428 vulnerabilities
Vulnerabilities for packages: cloudwatch-exporter, cassandra-reaper, akhq, druid, apicurio-registry, nrjmx, thingsboard...
GHSA-V3JC-474W-2WM6 vulnerabilities
Vulnerabilities for packages: cloudwatch-exporter, cassandra-reaper, akhq, druid, apicurio-registry, nrjmx, thingsboard...
CVE-2026-73508 vulnerabilities
Vulnerabilities for packages: tez, zipkin, apache-pulsar, akhq, druid, spark, apicurio-registry, opensearch, management-api-for-apache-cassandra-5.0, strimzi-kafka-operator, thingsboard, apache-nifi...
GO-2024-2918 vulnerabilities
Vulnerabilities for packages: grafana-mimir, trino, druid, py3-cassandra-medusa, zarf, argo-workflows, flux-source-controller, fulcio, hugo-extended, nuclei, rekor, kubescape, rook, secrets-store-csi-driver-provider-azure, spire-server, sqlpad, trivy, grafana-agent-operator, harbor-registry,...
Apache Druid - Remote Code Execution
Apache Druid is susceptible to remote code execution because by default it lacks authorization and authentication. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server. id: CVE-2021-25646 info: name: Apache Druid - Remote Cod...
GHSA-HF6X-8P5F-CGMF vulnerabilities
Vulnerabilities for packages: cassandra-reaper, akhq, druid, apicurio-registry, nrjmx, thingsboard...
CVE-2026-54399 vulnerabilities
Vulnerabilities for packages: cassandra-reaper, akhq, druid, apicurio-registry, nrjmx, thingsboard...
Apache Druid Kafka Connect - Remote Code Execution
The vulnerability has the potential to enable a remote attacker with authentication to run any code on the system. This is due to unsafe deserialization that occurs during the configuration of the connector through the Kafka Connect REST API id: CVE-2023-25194 info: name: Apache Druid Kafka Conne...
Malicious code in @or-sdk/druid (npm)
npm/@or-sdk/druid is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...
MAL-2026-11690 Malicious code in @or-sdk/druid (npm)
npm/@or-sdk/druid is affected by the large-scale, self-propagating npm supply-chain worm of 2026-08-04 the "Shai-Hulud: Here We Go Again" wave — the same campaign that began with the compromise of the keyv and cacheable maintainer account. The listed versions were trojanized and republished by th...
CLEANSTART-2026-KL10922 Security fixes in druid-exporter-fips 0.8-r3
Package druid-exporter-fips version 0.8-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...
CLEANSTART-2026-MY22446 Security fixes in druid-exporter-fips 0.10-r5
Package druid-exporter-fips version 0.10-r5 fixes 11 vulnerabilities: CVE-2026-39820, CVE-2026-42499, CVE-2026-33814, CVE-2026-33811, CVE-2026-39836...
CLEANSTART-2026-QA27412 Security fixes in druid-exporter-fips 0.10-r4
Package druid-exporter-fips version 0.10-r4 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...
CLEANSTART-2026-RG39411 Security fixes in druid-exporter-fips 0.10-r1
Package druid-exporter-fips version 0.10-r1 fixes 3 vulnerabilities: CVE-2025-61729, CVE-2025-61727, ghsa-4f99-4q7p-p3gh...
CLEANSTART-2026-OT89777 Security fixes in druid-exporter-fips 0.11-r0
Package druid-exporter-fips version 0.11-r0 fixes 4 vulnerabilities: CVE-2023-45142, CVE-2023-25151, CVE-2022-21698, CVE-2022-29526...
CLEANSTART-2026-KK32351 Security fixes in druid-exporter-fips 0.8-r2
Package druid-exporter-fips version 0.8-r2 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...
CLEANSTART-2026-OK10530 Security fixes in druid-exporter-fips 0.11-r4
Package druid-exporter-fips version 0.11-r4 fixes 3 vulnerabilities: CVE-2026-25679, CVE-2026-27142, CVE-2026-27139...
CVE-2026-56741 vulnerabilities
Vulnerabilities for packages: tez, apache-camel-karavan-devmode, kafka-fips, pinot, spark-kubernetes-operator-fips, hadoop-fips, spark, spark-kubernetes-operator, hadoop-client-modules, zookeeper-fips, apache-pulsar, apache-nifi, druid, zookeeper, confluent-kafka, apache-hop, kafka,...