448 matches found
Apache Druid - Local File Inclusion
Apache Druid ingestion system is vulnerable to local file inclusion. The InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows authenticated users to read data from other sources than intended, such as the local file system, with the privileges of t...
CLEANSTART-2026-KL10922 Security fixes in druid-exporter-fips 0.8-r3
Package druid-exporter-fips version 0.8-r3 fixes 8 vulnerabilities: CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32283...
Apache Druid - Remote Code Execution
Apache Druid is susceptible to remote code execution because by default it lacks authorization and authentication. Attackers can send specially crafted requests to execute arbitrary code with the privileges of processes on the Druid server. id: CVE-2021-25646 info: name: Apache Druid - Remote Cod...
Apache Druid Kafka Connect - Remote Code Execution
The vulnerability has the potential to enable a remote attacker with authentication to run any code on the system. This is due to unsafe deserialization that occurs during the configuration of the connector through the Kafka Connect REST API id: CVE-2023-25194 info: name: Apache Druid Kafka Conne...
CVE-2026-56741 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop-fips, hadoop-fips, hadoop-client-modules, zookeeper, tez, pinot, confluent-kafka, spark, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator, spark-fips, apache-nifi, apache-pulsar-fips,...
CVE-2026-56741 vulnerabilities
Vulnerabilities for packages: tez, confluent-kafka, kafka, zookeeper, apache-pulsar, apache-nifi, druid...
CVE-2026-56740 vulnerabilities
Vulnerabilities for packages: tez, confluent-kafka, kafka, zookeeper, apache-pulsar, apache-nifi, druid...
CVE-2026-50193 vulnerabilities
Vulnerabilities for packages: kayenta, spark-fips, spark, hadoop-fips, hadoop-client-modules, druid, kayenta-fips, seata...
GHSA-3WRR-7QPF-2PRH vulnerabilities
Vulnerabilities for packages: kayenta, spark-fips, spark, hadoop-fips, hadoop-client-modules, druid, kayenta-fips, seata...
GHSA-47QP-HQVX-6R3F vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop-fips, hadoop-fips, hadoop-client-modules, zookeeper, tez, pinot, confluent-kafka, spark, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator, spark-fips, apache-nifi, apache-pulsar-fips,...
GHSA-2R2C-CX56-8933 vulnerabilities
Vulnerabilities for packages: spark-kubernetes-operator-fips, apache-hop-fips, hadoop-fips, hadoop-client-modules, zookeeper, tez, pinot, confluent-kafka, spark, apache-hop, confluent-kafka-jre-bcfips, spark-kubernetes-operator, spark-fips, apache-nifi, apache-pulsar-fips,...
GHSA-2R2C-CX56-8933 vulnerabilities
Vulnerabilities for packages: tez, confluent-kafka, kafka, zookeeper, apache-pulsar, apache-nifi, druid...
GHSA-47QP-HQVX-6R3F vulnerabilities
Vulnerabilities for packages: tez, confluent-kafka, kafka, zookeeper, apache-pulsar, apache-nifi, druid...
CVE-2026-7468
A security vulnerability has been detected in 1024-lab smart-admin up to 3.30.0. This affects an unknown function of the file /smart-admin-api/druid/index.html of the component Demo Site. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has bee...
GHSA-443W-3RQ3-5M5H vulnerabilities
Vulnerabilities for packages: druid...
GHSA-443W-3RQ3-5M5H vulnerabilities
Vulnerabilities for packages: druid...
CLEANSTART-2026-PK19530 Security fixes for CVE-2022-29526, CVE-2025-47907, CVE-2025-58183, CVE-2025-58185, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-4f99-4q7p-p3gh applied in versions: 0.10-r0, 0.11-r0, 0.11-r2, 0.11-r3, 0.11-r4, 0.11-r5, 0.11-r6
Multiple security vulnerabilities affect the druid-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-OH43332 Security fixes for CVE-2022-29526, CVE-2025-47907, CVE-2025-61726, CVE-2025-61727, CVE-2025-61728, CVE-2025-61729, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501, ghsa-4f99-4q7p-p3gh applied in versions: 0.10-r0, 0.10-r1, 0.10-r2, 0.10-r3, 0.10-r4, 0.10-r5, 0.11-r0
Multiple security vulnerabilities affect the druid-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...
CLEANSTART-2026-KA21986 Security fixes for CVE-2022-29526, CVE-2025-47907, CVE-2025-61726, CVE-2025-61728, CVE-2025-61730, CVE-2025-68121, CVE-2026-24515, CVE-2026-25210, CVE-2026-25679, CVE-2026-27139, CVE-2026-27142, CVE-2026-32280, CVE-2026-32281, CVE-2026-32282, CVE-2026-32283, CVE-2026-32289, CVE-2026-33810, CVE-2026-33811, CVE-2026-33814, CVE-2026-39817, CVE-2026-39819, CVE-2026-39820, CVE-2026-39823, CVE-2026-39825, CVE-2026-39826, CVE-2026-39836, CVE-2026-42499, CVE-2026-42501 applied in versions: 0.10-r0, 0.11-r0, 0.9-r0, 0.9-r1, 0.9-r2, 0.9-r3, 0.9-r4
Multiple security vulnerabilities affect the druid-exporter-fips package. These issues are resolved in later releases. See references for individual vulnerability details...