org.apache.druid:druid-core vulnerabilities (Maven)

3 vulnerabilities.

• org.apache.druid:druid-core Maven Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended (incomplete fix of CVE-2021-26920) CVE-2021-36749 Public exploitFix available EPSS 80.9% 6.5 MediumSeptember 24, 2021
• org.apache.druid:druid-core Maven fast-xml-parser vulnerable to Prototype Pollution through tag or attribute name CVE-2023-26920 Fix available 6.5 MediumJuly 2, 2021
• org.apache.druid:druid-core Maven Apache Druid: The HTTP inputSource allows authenticated users to read data from other sources than intended CVE-2021-26920 Fix available 6.5 MediumJuly 2, 2021