CVE-2026-46718

Опубликовано: 02 июн. 2026

Источник: nvd

CVSS3: 6.5

EPSS Низкий

Описание

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.

This issue affects Apache Calcite: from 1.5.0 before 1.42.

Users are recommended to upgrade to version 1.42, which fixes the issue.

Ссылки

https://lists.apache.org/thread/9s37svo343w5ck1ovh478lkzcqk4949v
Mailing List
Vendor Advisory
http://www.openwall.com/lists/oss-security/2026/06/01/7
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:apache:calcite:*:*:*:*:*:*:*:*

Версия от 1.5.0 (включая) до 1.42.0 (исключая)

EPSS

Процентиль: 35%

0.00436

Низкий

6.5 Medium

CVSS3

Дефекты

CWE-470

Связанные уязвимости

CVE-2026-46718

CVSS3: 5.4

redhat

2 месяца назад

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue.

GHSA-c2rv-hwqm-wjpg