Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Calcite

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.5
    CVE-2026-46718

    Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution

    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue.

    Apache Software Foundation Apache Calcite org.apache.calcite:calcite-core Maven