92078 matches found
CLEANSTART-2026-PD67176 Security fix for GHSA-r7wm-3cxj-wff9 applied in: trino 481-r5, wso2mi 4.6.0-r4, apache-hive 3.1.3-r0
GHSA-r7wm-3cxj-wff9 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-ZL21597 deserialization flaw was discovered in the jackson-databind in versions before 2
Security vulnerability affects the apache-hive package. A deserialization flaw was discovered in the jackson-databind in versions before 2...
CLEANSTART-2026-GK30555 XXE issue in SAXBuilder in JDOM through 2
Security vulnerability affects the apache-hive package. An XXE issue in SAXBuilder in JDOM through 2...
CLEANSTART-2026-HM98634 OkHttp before 2
Security vulnerability affects the apache-hive package. OkHttp before 2...
CLEANSTART-2026-IG26224 FasterXML jackson-databind through 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind through 2...
CLEANSTART-2026-UN12720 FasterXML jackson-databind 2
Security vulnerability affects the apache-hive package. FasterXML jackson-databind 2...
CLEANSTART-2026-AU08981 Security fix for GHSA-72hv-8253-57qq applied in: apache-hive 3.1.3-r0
Security vulnerability affects the apache-hive package. This issue is resolved in later releases. See references for vulnerability details...
CLEANSTART-2026-GA95827 Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor
Security vulnerability affects the apache-hive package. Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...
CLEANSTART-2026-UR77351 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor
Security vulnerability affects the apache-hive package. jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...
CLEANSTART-2026-NM36823 deserialization flaw was discovered in the jackson-databind, versions before 2
Security vulnerability affects the apache-hive package. A deserialization flaw was discovered in the jackson-databind, versions before 2...
CLEANSTART-2026-PY40890 In verifyHostName of OkHostnameVerifier
Security vulnerability affects the apache-hive package. In verifyHostName of OkHostnameVerifier...
CLEANSTART-2026-GO41173 Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly
Security vulnerability affects the apache-hive package. Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly...
CLEANSTART-2026-DN30065 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings
Security vulnerability affects the apache-hive package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...
CLEANSTART-2026-VM68422 JMSSink in all versions of Log4j 1
Security vulnerability affects the apache-hive package. JMSSink in all versions of Log4j 1...
CLEANSTART-2026-NO09997 Use of Arrays
Security vulnerability affects the apache-hive package. Use of Arrays...
CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container
Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...
CLEANSTART-2026-QY70985 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw
Security vulnerability affects the apache-hive package. CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw...
CLEANSTART-2026-HH95708 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender
Security vulnerability affects the apache-hive package. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender...