Package · Maven

org.apache.ranger:ranger-plugins-common

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Critical 9.8

CVE-2025-59059 Public exploit

Apache Ranger: Remote Code Execution Vulnerability in NashornScriptEngineCreator

Remote Code Execution Vulnerability in NashornScriptEngineCreator is reported in Apache Ranger versions <= 2.7.0. Users are recommended to upgrade to version 2.8.0, which fixes this issue.

Apache Software Foundation Apache Ranger druid trino-plugin-ranger Wolfi Maven

Mar 3, 2026
Medium 5.9

CVE-2016-8746

Apache Ranger policy engine incorrectly matches paths in certain conditions

Apache Ranger before 0.6.3 policy engine incorrectly matches paths in certain conditions when policy does not contain wildcards and has recursion flag set to true.

Apache Software Foundation Apache Ranger org.apache.ranger:ranger-plugins-common Maven

Jun 14, 2017