Skip to content
OpenAdvisories

Package · Maven

org.apache.heron:heron-simulator

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Critical 9.8
    CVE-2020-1964

    Deserialization of Untrusted Data in Apache Heron

    It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerabilities (CWE-502: D…

    org.apache.heron:heron-simulator Maven