Skip to content
OpenAdvisories

Package · Maven

io.crate:crate

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.1
    CVE-2026-49989

    CrateDB's Blob HTTP handler bypasses authorization

    CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of `GRANT`s. CrateDB has two ways…

    crate crate io.crate:crate Maven
  • Medium 5.3
    CVE-2024-37309

    Client initialized Session-Renegotiation DoS

    CrateDB is a distributed SQL database. A high-risk vulnerability has been identified in versions prior to 5.7.2 where the TLS endpoint (port 4200) permits client-initiated renegotiation. In this scenario, an attacker can exploit this feature to repeatedly req…

    crate crate io.crate:crate Maven
  • Medium 5.7
    CVE-2024-24565 Scanner template

    CrateDB database has an arbitrary file read vulnerability

    CrateDB is a distributed SQL database that makes it simple to store and analyze massive amounts of data in real-time. There is a COPY FROM function in the CrateDB database that is used to import file data into database tables. This function has a flaw, and au…

    crate crate io.crate:crate Maven
  • Critical 9.8
    CVE-2023-51982

    CrateDB authentication bypass vulnerability

    CrateDB 5.5.1 is contains an authentication bypass vulnerability in the Admin UI component. After configuring password authentication and_ Local_ In the case of an address, identity authentication can be bypassed by setting the X-Real IP request header to a s…

    io.crate:crate Maven