CLEANSTART-2026-QU95905 Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2

Security vulnerability affects the apache-hive package. A Polymorphic Typing issue was discovered in FasterXML jackson-databind before 2...

CLEANSTART-2026-UR77351 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor

Security vulnerability affects the apache-hive package. jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...

CLEANSTART-2026-AU08981 Security fix for ghsa-72hv-8253-57qq applied in: apache-hive 3.1.3-r0

Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...

CLEANSTART-2026-UN12720 FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...

CLEANSTART-2026-GK30555 XXE issue in SAXBuilder in JDOM through 2

Security vulnerability affects the apache-hive package. An XXE issue in SAXBuilder in JDOM through 2...

CLEANSTART-2026-EL43307 issue was discovered in FasterXML jackson-databind 2

Security vulnerability affects the apache-hive package. An issue was discovered in FasterXML jackson-databind 2...

CLEANSTART-2026-HM98634 OkHttp before 2

Security vulnerability affects the apache-hive package. OkHttp before 2...

CLEANSTART-2026-ZL21597 deserialization flaw was discovered in the jackson-databind in versions before 2

Security vulnerability affects the apache-hive package. A deserialization flaw was discovered in the jackson-databind in versions before 2...

CLEANSTART-2026-NM36823 deserialization flaw was discovered in the jackson-databind, versions before 2

Security vulnerability affects the apache-hive package. A deserialization flaw was discovered in the jackson-databind, versions before 2...

CLEANSTART-2026-GA95827 Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor

Security vulnerability affects the apache-hive package. Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...

CLEANSTART-2026-PD67176 Security fix for ghsa-r7wm-3cxj-wff9 applied in: trino 481-r5, wso2mi 4.6.0-r4, apache-hive 3.1.3-r0

ghsa-r7wm-3cxj-wff9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IG26224 FasterXML jackson-databind through 2

Security vulnerability affects the apache-hive package. FasterXML jackson-databind through 2...

CLEANSTART-2026-HH95708 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Security vulnerability affects the apache-hive package. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender...

CLEANSTART-2026-EJ90650 Included in Log4j 1

Security vulnerability affects the apache-hive package. Included in Log4j 1...

CLEANSTART-2026-VM68422 JMSSink in all versions of Log4j 1

Security vulnerability affects the apache-hive package. JMSSink in all versions of Log4j 1...

CLEANSTART-2026-GO41173 Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly

Security vulnerability affects the apache-hive package. Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly...

CLEANSTART-2026-DN30065 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings

Security vulnerability affects the apache-hive package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...

CLEANSTART-2026-IJ91953 GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer

Security vulnerability affects the apache-hive package. GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer...

CLEANSTART-2026-FS95827 JMSAppender in Log4j 1

Security vulnerability affects the apache-hive package. JMSAppender in Log4j 1...

CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container

Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...