Apache Paimon 2.1.0 MySQL CDC Arbitrary File Read

Apache Paimon versions 2.1.0 and 2.0.0 MySQL CDC synchronization actions allow user-supplied JDBC properties that can enable a rogue MySQL server to request arbitrary local files from the CDC process. !/usr/bin/env bash Apache Paimon 2.1.0 MySQL CDC Arbitrary File Read Vendor: The Apache Software...

Apache Paimon 2.1.0 MySQL CDC Arbitrary File Read

Summary A lake format that enables building a Realtime Lakehouse Architecture with Flink and Spark for both streaming and batch operations. Innovatively combines lake format and LSM structure, bringing realtime streaming updates into the lake architecture. Description Apache Paimon's MySQL CDC...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: GHSA-WQM3-W3P6-XJGM...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: OSV:GHSA-WQM3-W3P6-XJGM...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-13539423...

io.gitee.liwei0903nn:flink-cdc-spring-boot-starter (1.0.0), io.github.regychang:flinkify-flink-core (>=0.2.1, <=0.2.2) potentially affected by CVE-2025-62228 via org.apache.flink:flink-connector-mysql-cdc (>=3.2.0, <=3.3.0)

org.apache.flink:flink-connector-mysql-cdc MAVEN version =3.2.0, =0.2.1, =0.2.2 Source cves: CVE-2025-62228 Source advisory: MEND:CVE-2025-62228...