CLEANSTART-2026-UR77351 jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor

Security vulnerability affects the apache-hive package. jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...

CLEANSTART-2026-GA95827 Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor

Security vulnerability affects the apache-hive package. Jackson-core contains core low-level incremental "streaming" parser and generator abstractions used by Jackson Data Processor...

CLEANSTART-2026-NM36823 deserialization flaw was discovered in the jackson-databind, versions before 2

Security vulnerability affects the apache-hive package. A deserialization flaw was discovered in the jackson-databind, versions before 2...

CLEANSTART-2026-JU40621 attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container

Security vulnerability affects the apache-hive package. An attacker that is able to modify Velocity templates may execute arbitrary Java code or run arbitrary system commands with the same privileges as the account running the Servlet container...

CLEANSTART-2026-HH95708 Improper validation of certificate with host mismatch in Apache Log4j SMTP appender

Security vulnerability affects the apache-hive package. Improper validation of certificate with host mismatch in Apache Log4j SMTP appender...

CLEANSTART-2026-EJ90650 Included in Log4j 1

Security vulnerability affects the apache-hive package. Included in Log4j 1...

CLEANSTART-2026-IJ91953 GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer

Security vulnerability affects the apache-hive package. GzipSource does not handle an exception that might be raised when parsing a malformed gzip buffer...

CLEANSTART-2026-CB62266 By design, the JDBCAppender in Log4j 1

Security vulnerability affects the apache-hive package. By design, the JDBCAppender in Log4j 1...

CLEANSTART-2026-DN30065 Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings

Security vulnerability affects the apache-hive package. Allocation of Resources Without Limits or Throttling vulnerability in Apache Thrift Java bindings...

CLEANSTART-2026-FQ60259 Improper Handling of Highly Compressed Data (Data Amplification) vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings

Security vulnerability affects the apache-hive package. Improper Handling of Highly Compressed Data Data Amplification vulnerability in Apache Thrift C++, Java, Python, Go, D, C/GLib bindings...

CLEANSTART-2026-PY40890 In verifyHostName of OkHostnameVerifier

Security vulnerability affects the apache-hive package. In verifyHostName of OkHostnameVerifier...

CLEANSTART-2026-TG12161 Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity

Security vulnerability affects the apache-hive package. Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity...

CLEANSTART-2026-VM68422 JMSSink in all versions of Log4j 1

Security vulnerability affects the apache-hive package. JMSSink in all versions of Log4j 1...

CLEANSTART-2026-NO09997 Use of Arrays

Security vulnerability affects the apache-hive package. Use of Arrays...

CLEANSTART-2026-GO41173 Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly

Security vulnerability affects the apache-hive package. Hive creates a credentials file to a temporary directory in the file system with permissions 644 by default when the file permissions are not set explicitly...

CLEANSTART-2026-FS95827 JMSAppender in Log4j 1

Security vulnerability affects the apache-hive package. JMSAppender in Log4j 1...

CLEANSTART-2026-QY70985 CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw

Security vulnerability affects the apache-hive package. CVE-2020-9493 identified a deserialization issue that was present in Apache Chainsaw...

CLEANSTART-2026-PZ72315 Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON

CVE-2026-49844 affects multiple packages. Improper encoding of non-finite floating-point values during MapMessage JSON serialization in Apache Log4j API produces output that is not valid JSON. See references for individual vulnerability details...

CLEANSTART-2026-WR59127 Apache Xerces2 Java Parser before 2

Security vulnerability affects the apache-hive package. Apache Xerces2 Java Parser before 2...

CLEANSTART-2026-HR57844 There's a vulnerability within the Apache Xerces Java (XercesJ) XML parser when handling specially crafted XML document payloads

Security vulnerability affects the apache-hive package. There's a vulnerability within the Apache Xerces Java XercesJ XML parser when handling specially crafted XML document payloads...