trino-fips-plugin-pinot

Direct Vulnerabilities

Known vulnerabilities in the trino-fips-plugin-pinot package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Server-Side Request Forgery (SSRF)	<483-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<483-r2
L Resource Exhaustion	<483-r2
L Resource Exhaustion	<483-r2
L Resource Exhaustion	<483-r2
L Improper Access Control	<483-r2
L CRLF Injection	<483-r2
H Missing Release of Resource after Effective Lifetime	<483-r2
L Time-of-check Time-of-use (TOCTOU)	<483-r2
L CRLF Injection	<483-r2
L Improper Check for Certificate Revocation	<483-r2
H Resource Exhaustion	<483-r2
M Memory Leak	<483-r2
H Resource Exhaustion	<483-r2
C Improper Certificate Validation	<483-r2
M HTTP Request Smuggling	<483-r2
C XML External Entity (XXE) Injection	<483-r2
H Allocation of Resources Without Limits or Throttling	<483-r2
L Resource Exhaustion	<483-r2
H HTTP Request Smuggling	<483-r2
L Resource Exhaustion	<483-r2
M CRLF Injection	<483-r2
L Resource Exhaustion	<483-r2
L Improper Encoding or Escaping of Output	<483-r0
L CVE-2026-54428	<483-r0
L CVE-2026-54399	<483-r0
L NULL Pointer Dereference	<483-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<481-r0
L GHSA-mhm7-754m-9p8w	<482-r0
L GHSA-r7wm-3cxj-wff9	<483-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<482-r0
L CVE-2026-10532	<482-r0
L CVE-2026-9828	<482-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<482-r0
L Improperly Controlled Modification of Dynamically-Determined Object Attributes	<482-r0
L Incomplete Blacklist	<482-r0
L Incorrect Authorization	<482-r0
L Incomplete Blacklist	<482-r0
L Server-Side Request Forgery (SSRF)	<482-r0
L Incorrect Authorization	<482-r0
L Improper Verification of Cryptographic Signature	<481-r2
C Insufficient Verification of Data Authenticity	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
L Use of Insufficiently Random Values	<481-r2
L Resource Exhaustion	<481-r2
H Memory Leak	<481-r2
L Resource Exhaustion	<481-r2
C Insufficient Verification of Data Authenticity	<481-r2
L Resource Exhaustion	<481-r2
H Resource Exhaustion	<481-r2
H Memory Leak	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
L Resource Exhaustion	<481-r2
L Improper Check or Handling of Exceptional Conditions	<481-r2
L Improper Verification of Source of a Communication Channel	<481-r2
L HTTP Request Smuggling	<481-r2
L Information Exposure	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
L Improper Access Control	<481-r2
L Resource Exhaustion	<481-r2
M Allocation of Resources Without Limits or Throttling	<481-r2
L Information Exposure	<481-r2
L Uncontrolled Recursion	<481-r3
L Resource Exhaustion	<481-r2
H Resource Exhaustion	<481-r2
C Improper Input Validation	<481-r2
L Resource Exhaustion	<481-r2
L Allocation of Resources Without Limits or Throttling	<481-r2
C HTTP Request Smuggling	<481-r2
C HTTP Request Smuggling	<481-r2
L Integer Overflow or Wraparound	<481-r2
H CRLF Injection	<481-r2
H HTTP Response Splitting	<481-r2
H HTTP Request Smuggling	<481-r2
L Missing Release of Resource after Effective Lifetime	<481-r2
L CRLF Injection	<481-r2
L Missing Critical Step in Authentication	<481-r0
L Uncontrolled Recursion	*

Vulnerability

Vulnerable Version

Server-Side Request Forgery (SSRF)

<483-r0