CVE-2026-33871 vulnerabilities

Vulnerabilities for packages: keycloak, druid, pinot, kayenta-fips, spark-fips, flyway-fips, infinispan, localstack, apache-pulsar-fips, opensearch, management-api-for-apache-cassandra-5.0, kafbat-ui, apache-pulsar, apicurio-registry, akhq, seata, strimzi-kafka-operator, thingsboard,...

CVE-2022-26112

In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy function support. In order to avoid this, we disabled the groovy function support by default from Pinot release 0.11.0. See...

CVE-2022-23974

In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow open access to the controller a specially crafted request can potentially be exploited to cause disruption in pinot service. Pinot release...

com.navercorp.pinpoint:pinpoint-batch (>=3.0.0 <=3.0.5), com.navercorp.pinpoint:pinpoint-collector-starter (>=2.5.0 <=3.0.5) +66 more potentially affected by CVE-2024-56325 via org.apache.pinot:pinot-common (>=0.10.0 <=1.2.0)

org.apache.pinot:pinot-common MAVEN version =0.10.0, =3.0.0, =2.5.0, =3.0.0, =3.0.0, =3.0.0, =2.5.0, =3.0.1, =3.0.1, =2.5.1, =2.5.1, =3.0.0, =2.5.1, =2.5.1, =2.5.0, =2024.4.0, =2025.1.1 and more Source cves: CVE-2024-56325 Source advisory: OSV:GHSA-6JWP-4WVJ-6597...

Apache Pinot Improper Neutralization of Special Elements Authentication Bypass Vulnerability

This vulnerability allows remote attackers to bypass authentication on affected installations of Apache Pinot. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AuthenticationFilter class. The issue results from insufficient neutralization of specia...

Apache Pinot 安全漏洞

Apache Pinot is a real-time distributed OLAP data store from the Apache Foundation, Inc. Designed to provide ultra-low latency analysis, Apache Pinot 0.9.3 and earlier versions contain a denial-of-service vulnerability that could be exploited by an attacker to cause a Pinot service outage via a...