Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-c2rv-hwqm-wjpg

Опубликовано: 02 июн. 2026
Источник: github
Github: Прошло ревью
CVSS3: 6.5

Описание

Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.

This issue affects Apache Calcite: from 1.5.0 before 1.42.

Users are recommended to upgrade to version 1.42, which fixes the issue.

Пакеты

Наименование

org.apache.calcite:calcite-core

maven
Затронутые версииВерсия исправления

>= 1.5.0, < 1.42.0

1.42.0

EPSS

Процентиль: 36%
0.00436
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-470

Связанные уязвимости

CVSS3: 5.4
redhat
2 месяца назад

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue.

CVSS3: 6.5
nvd
2 месяца назад

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue.

EPSS

Процентиль: 36%
0.00436
Низкий

6.5 Medium

CVSS3

Дефекты

CWE-470