com.datasqrl.flinkrunner:stdlib-json (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2) +15 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-runtime MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799797...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0, <=0.10.1), com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4) +18 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (2.2.0)

org.apache.flink:flink-table-runtime MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-runtime and may be impacted: - com.datasqrl.flinkrunner:stdlib-json =0.9.0, =0.9.0, =0.9.0, =0.9.0,...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the SQL code generation process. An attacker can execute arbitrary code on TaskManagers by submitting specially crafted SQL queries that exploit improper escaping of user-controlled strings in generated Java...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +193 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-runtime MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.4.0, =1.6.1, =1.4.0, =0.1.45, =0.1.47 - com.daasyyds.flink:flink-sql-analyzer 1.15.1-2022.07.1 and more Source cves: CVE-2026-35194 Source advisory:...

cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7), cn.sliew:flinkful-sql-catalog (>=1.0.3, <=1.0.7) +103 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-planner2.12 MAVEN version =1.15.0, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0, =0.1, =0.6.1, =0.6.1, =1.17-2.5.2, =2.5.1-flink-1.17 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2) +15 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-runtime MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

com.datasqrl.flinkrunner:stdlib-json (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2) +15 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-runtime MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =26.0.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.0, =2.1.1 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +193 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-runtime MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.4.0, =1.6.1, =1.4.0, =0.1.45, =0.1.47 - com.daasyyds.flink:flink-sql-analyzer 1.15.1-2022.07.1 and more Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX...

org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.0-alpha2) +2 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =2.1.0, =2.1.1 Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

com.datasqrl:sqrl-discovery (>=0.9.0-alpha1, <=0.9.0-alpha2), com.datasqrl:sqrl-planner (>=0.9.0-alpha1, <=0.9.0-alpha2) +2 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=2.1.0, <=2.1.1)

org.apache.flink:flink-table-planner2.12 MAVEN version =2.1.0, =0.9.0-alpha1, =0.9.0-alpha1, =0.9.0-alpha1, =2.1.0, =2.1.1 Source cves: CVE-2026-35194 Source advisory: GHSA-2F54-V4HM-FX73...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...

Arbitrary Code Injection

Overview Affected versions of this package are vulnerable to Arbitrary Code Injection via the SQL code generation process. An attacker can execute arbitrary code on TaskManagers by submitting specially crafted SQL queries that exploit improper escaping of user-controlled strings in generated Java...

cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7), cn.sliew:flinkful-sql-catalog (>=1.0.3, <=1.0.7) +103 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-planner2.12 MAVEN version =1.15.0, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =1.0, =0.1, =0.6.1, =0.6.1, =1.17-2.5.2, =2.5.1-flink-1.17 and more Source cves: CVE-2026-35194 Source advisory: SNYK:JAVA-ORGAPACHEFLINK-16799799...

com.datasqrl:sqrl-discovery (>=0.9.0, <=0.10.4), com.datasqrl:sqrl-planner (>=0.9.0, <=0.10.4) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-planner_2.12 (2.2.0)

org.apache.flink:flink-table-planner2.12 MAVEN version 2.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-table-planner2.12 and may be impacted: - com.datasqrl:sqrl-discovery =0.9.0, =0.9.0, =0.9.0, =0.2.0, =0.2.0, =0.2.0,...

cn.ibizlab.plugin:ibiz-dataflow-flink (>=8.1.0.371, <=8.1.0.567.22), cn.sliew:flinkful-cli-descriptor-examples (>=1.0.2, <=1.0.7) +193 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=1.15.0, <=1.20.3)

org.apache.flink:flink-table-runtime MAVEN version =1.15.0, =8.1.0.371, =1.0.2, =1.0.3, =1.0.0, =1.0.2, =0.5.0, =0.5.0, =1.4.0, =1.4.0, =1.6.1, =1.4.0, =0.1.45, =0.1.47 - com.daasyyds.flink:flink-sql-analyzer 1.15.1-2022.07.1 and more Source cves: CVE-2026-35194 Source advisory:...

org.apache.doris:flink-doris-connector-2.0 (>=26.0.0, <=26.3.0), org.apache.flink:flink-examples-table_2.12 (>=2.0.0, <=2.0.1) +6 more potentially affected by CVE-2026-35194 via org.apache.flink:flink-table-runtime (>=2.0.0, <=2.0.1)

org.apache.flink:flink-table-runtime MAVEN version =2.0.0, =26.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.1 Source cves: CVE-2026-35194 Source advisory: OSV:GHSA-2F54-V4HM-FX73...

CVE-2026-44719

Mathesar (Web app for PostgreSQL) fixed a privilege check vulnerability in versions 0.2.0–0.09.x. Endpoints such as collaborators.list, tables.metadata.list, explorations.list, and forms.list accepted a database_id without verifying that the requester was a collaborator, allowing an authenticated...

Budibase: `PUT /api/datasources/:datasourceId` is protected only by `TABLE/READ` permission instead of builder access, allowing any authenticated app user to overwrite datasource connection parameters including host, port, and URL

Summary Budibase exposes a REST API for datasource management. The route PUT /api/datasources/:datasourceId is registered in the authorizedRoutes group with TABLE/READ permission. This is the same authorization level as the read endpoint GET /api/datasources/:datasourceId. Every authenticated...