trino-fips-plugin-delta-lake

Direct Vulnerabilities

Known vulnerabilities in the trino-fips-plugin-delta-lake package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Server-Side Request Forgery (SSRF)	<483-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<483-r2
L Resource Exhaustion	<483-r2
L Resource Exhaustion	<483-r2
L Resource Exhaustion	<483-r2
L CRLF Injection	<483-r2
H Missing Release of Resource after Effective Lifetime	<483-r2
L Improper Access Control	<483-r2
L Time-of-check Time-of-use (TOCTOU)	<483-r2
L CRLF Injection	<483-r2
L Improper Check for Certificate Revocation	<483-r2
M Memory Leak	<483-r2
H Resource Exhaustion	<483-r2
H Resource Exhaustion	<483-r2
M HTTP Request Smuggling	<483-r2
C XML External Entity (XXE) Injection	<483-r2
H Allocation of Resources Without Limits or Throttling	<483-r2
L Resource Exhaustion	<483-r2
H HTTP Request Smuggling	<483-r2
L Resource Exhaustion	<483-r2
M CRLF Injection	<483-r2
L Resource Exhaustion	<483-r2
L Improper Encoding or Escaping of Output	<483-r0
L CVE-2026-54428	<483-r0
L CVE-2026-54399	<483-r0
C Improper Certificate Validation	<483-r2
L NULL Pointer Dereference	<483-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<481-r0
L Incorrect Authorization	<483-r0
L GHSA-mhm7-754m-9p8w	<482-r0
L GHSA-r7wm-3cxj-wff9	<483-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<482-r0
L CVE-2026-10532	<482-r0
L CVE-2026-9828	<482-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<482-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<482-r0
L Incomplete Blacklist	<482-r0
L Incorrect Authorization	<482-r0
L Incomplete Blacklist	<482-r0
L Server-Side Request Forgery (SSRF)	<482-r0
L Incorrect Authorization	<482-r0
L Allocation of Resources Without Limits or Throttling	<481-r2
L Improper Verification of Cryptographic Signature	<481-r2
L Use of Insufficiently Random Values	<481-r2
L Resource Exhaustion	<481-r2
L Resource Exhaustion	<481-r2
H Resource Exhaustion	<481-r2
L HTTP Request Smuggling	<481-r2
L Information Exposure	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
L Improper Access Control	<481-r2
L Resource Exhaustion	<481-r2
M Allocation of Resources Without Limits or Throttling	<481-r2
L Information Exposure	<481-r2
C Insufficient Verification of Data Authenticity	<481-r2
H Memory Leak	<481-r2
H Memory Leak	<481-r2
C Insufficient Verification of Data Authenticity	<481-r2
L Resource Exhaustion	<481-r2
L Resource Exhaustion	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
L Improper Check or Handling of Exceptional Conditions	<481-r2
L Improper Verification of Source of a Communication Channel	<481-r2
L Resource Exhaustion	<481-r2
H Resource Exhaustion	<481-r2
C Improper Input Validation	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
L Resource Exhaustion	<481-r2
C HTTP Request Smuggling	<481-r2
C HTTP Request Smuggling	<481-r2
L Integer Overflow or Wraparound	<481-r2
H CRLF Injection	<481-r2
H HTTP Response Splitting	<481-r2
H HTTP Request Smuggling	<481-r2
L Missing Release of Resource after Effective Lifetime	<481-r2
L CRLF Injection	<481-r2
L Missing Critical Step in Authentication	<481-r0
L Uncontrolled Recursion	*

Vulnerability

Vulnerable Version

Server-Side Request Forgery (SSRF)

<483-r0