trino-plugin-exchange-hdfs

43 results · Clear filters · Feed

• Medium 5.3
  CVE-2020-13956

  Cross-site scripting in Apache HttpClient

  Apache HttpClient versions prior to version 4.5.13 and 5.0.3 can misinterpret malformed authority component in request URIs passed to the library as java.net.URI object and pick the wrong target host for request execution.

  druid trino trino-plugin-opensearch trino-plugin-lakehouse Debian Ubuntu Wolfi Maven
  Dec 2, 2020
• Medium 6.5
  CVE-2018-11798

  Apache Thrift Node.js static web server sandbox escape

  The Apache Thrift Node.js static web server in versions 0.9.2 through 0.11.0 have been determined to contain a security vulnerability in which a remote user has the ability to access files outside the set webservers docroot path.

  Apache Software Foundation Apache Thrift druid trino Debian Wolfi Maven
  Jan 7, 2019
• Medium —
  CVE-2012-5783

  Improper Certificate Validation in Apache Commons HttpClient

  Apache Commons HttpClient 3.x, as used in Amazon Flexible Payments Service (FPS) merchant Java SDK and other products, does not verify that the server hostname matches a domain name in the subject's Common Name (CN) or subjectAltName field of the X.509 certif…

  trino trino-plugin-opensearch trino-plugin-lakehouse trino-plugin-pinot Debian Wolfi Maven
  Nov 4, 2012