apache-gravitino vulnerabilities (PyPI)
2 vulnerabilities.
-
apache-gravitinoPyPI Apache Gravitino: URL path injection via unencoded user-supplied identifiers in MCP REST client f-string URL construction, enabling path traversal to unintended API endpoints. 9.1 Critical -
apache-gravitinoPyPI Apache Gravitino: Authenticated SSRF in Gravitino JobManager allows server-side HTTP requests to internal network and cloud metadata endpoints via unvalidated job template URIs 6.5 Medium