CVE-2026-23906 Apache Druid: Authentication Bypass via LDAP Anonymous Bind

Affected Products and Versions Apache Druid Affected Versions: 0.17.0 through 35.x all versions prior to 36.0.0 Prerequisites: druid-basic-security extension enabled LDAP authenticator configured Underlying LDAP server permits anonymous bind ...

Apache Druid 安全漏洞

Apache Druid is the United States Apache Apache Foundation of a use of the Java language , written in column-oriented open source distributed database . Apache Druid has a security vulnerability that originates from improper validation of LDAP authentication responses, which could lead to...

PT-2026-7140

Name of the Vulnerable Software and Affected Versions Apache Druid versions 0.17.0 through 35.x Description An authentication bypass issue exists in Apache Druid when the druid-basic-security extension is enabled with LDAP authentication. If the underlying LDAP server allows anonymous binds, an...

GHSA-CQQJ-4P63-RRMM vulnerabilities

Vulnerabilities for packages: druid...

CVE-2019-20444 vulnerabilities

Vulnerabilities for packages: druid...

CLEANSTART-2026-TK38210 Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate

Multiple security vulnerabilities affect the druid-exporter-fips package. Due to the design of the name constraint checking algorithm, the processing time of some inputs scale non-linearly with respect to the size of the certificate. See references for individual vulnerability details...

CLEANSTART-2026-PZ62650 Cancelling a query (e

Multiple security vulnerabilities affect the druid-exporter-fips package. Cancelling a query e. See references for individual vulnerability details...

CLEANSTART-2026-LZ10721 Within HostnameError

Multiple security vulnerabilities affect the druid-exporter-fips package. Within HostnameError. See references for individual vulnerability details...

CLEANSTART-2026-HJ34439 Go before 1

Multiple security vulnerabilities affect the druid-exporter-fips package. Go before 1. See references for individual vulnerability details...

CLEANSTART-2026-KZ30232 Go before 1

Multiple security vulnerabilities affect the druid-exporter-fips package. Go before 1. See references for individual vulnerability details...

GHSA-GRR4-WV38-F68W vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-45693 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-45685 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-40150 vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-40149 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-7RF3-MQPX-H7XG vulnerabilities

Vulnerabilities for packages: druid...

GHSA-X27M-9W8J-5VCW vulnerabilities

Vulnerabilities for packages: druid...

GHSA-56H3-78GP-V83R vulnerabilities

Vulnerabilities for packages: druid...

CVE-2022-40150 vulnerabilities

Vulnerabilities for packages: druid...

GHSA-X27M-9W8J-5VCW vulnerabilities

Vulnerabilities for packages: druid...