Apache Software Foundation Calcite Avatica vulnerabilities

• apache software foundation calcite avatica Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins CVE-2026-70410 8.8 HighSeptember 22, 2026
• apache calcite avatica Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector CVE-2022-36364 Fix available 8.8 HighJuly 28, 2022