druid-compat

4 results · Clear filters · Feed

• High 8.2
  CVE-2025-55163 Public exploit

  Netty MadeYouReset HTTP/2 DDoS Vulnerability

  Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.124.Final and 4.2.4.Final, Netty is vulnerable to MadeYouReset DDoS. This is a logical vulnerability in the HTTP/2 protocol, that uses malformed HTTP/2 control frames …

  netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  Aug 13, 2025
• High 7.5
  CVE-2025-27817 Public exploit Scanner template EPSS 70%

  Apache Kafka Client: Arbitrary file read and SSRF vulnerability

  A possible arbitrary file read and SSRF vulnerability has been identified in Apache Kafka Client. Apache Kafka Clients accept configuration data for setting the SASL/OAUTHBEARER connection with the brokers, including "sasl.oauthbearer.token.endpoint.url" and …

  Apache Software Foundation Apache Kafka Client druid thingsboard-tb-node Wolfi Maven
  Jun 10, 2025
• Critical 10.0
  CVE-2025-30065 Public exploit EPSS 44%

  Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata

  Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to upgrade to version 1.15.1, which fixes the issue.

  Apache Software Foundation Apache Parquet Java druid druid-compat Wolfi Maven
  Apr 1, 2025
• High 8.6
  CVE-2024-36114 Public exploit

  Decompressors can crash the JVM and leak memory content in Aircompressor

  Aircompressor is a library with ports of the Snappy, LZO, LZ4, and Zstandard compression algorithms to Java. All decompressor implementations of Aircompressor (LZ4, LZO, Snappy, Zstandard) can crash the JVM for certain input, and in some cases also leak the c…

  airlift aircompressor druid trino Wolfi Maven
  May 29, 2024