apache-druid

Direct Vulnerabilities

Known vulnerabilities in the apache-druid package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Uncontrolled Memory Allocation	<38.0.0-r0
L Uncontrolled Memory Allocation	<38.0.0-r0
H CVE-2022-3171	<38.0.0-r0
M Improper Handling of Length Parameter Inconsistency	<38.0.0-r0
L Creation of Temporary File With Insecure Permissions	<38.0.0-r0
H Information Exposure Through Caching	<38.0.0-r0
L NULL Pointer Dereference	<38.0.0-r0
L Information Exposure	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
H Missing Release of Resource after Effective Lifetime	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
L CRLF Injection	<38.0.0-r0
L Uncontrolled Recursion	<38.0.0-r0
H HTTP Request Smuggling	<38.0.0-r0
H HTTP Response Splitting	<38.0.0-r0
L Integer Overflow or Wraparound	<38.0.0-r0
L GHSA-58qw-p7qm-5rvh	<38.0.0-r0
L Information Exposure	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<38.0.0-r0
L CVE-2026-0636	<38.0.0-r0
M Allocation of Resources Without Limits or Throttling	<38.0.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<38.0.0-r0
H Algorithmic Complexity	<38.0.0-r0
C Improper Check for Unusual or Exceptional Conditions	<38.0.0-r0
H Out-of-bounds Write	<38.0.0-r0
L Out-of-bounds Write	<38.0.0-r0
H Improper Output Neutralization for Logs	<38.0.0-r0
H Improper Encoding or Escaping of Output	<38.0.0-r0
L Information Exposure	<38.0.0-r0
L Out-of-bounds Write	<38.0.0-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<38.0.0-r0
L Use of Insufficiently Random Values	<38.0.0-r0
L CVE-2026-5588	<38.0.0-r0
H Allocation of Resources Without Limits or Throttling	<38.0.0-r0
L Improper Input Validation	<38.0.0-r0
L Improper Access Control	<38.0.0-r0
L Improper Input Validation	<38.0.0-r0
M Improper Input Validation	<38.0.0-r0
H HTTP Request Smuggling	<38.0.0-r0
M HTTP Request Smuggling	<38.0.0-r0
L Information Exposure Through Server Log Files	<38.0.0-r0
L HTTP Request Smuggling	<38.0.0-r0
H Improper Encoding or Escaping of Output	<38.0.0-r0
H Resource Exhaustion	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
M Improper Input Validation	<38.0.0-r0
M Allocation of Resources Without Limits or Throttling	<38.0.0-r0
M CRLF Injection	<38.0.0-r0
C Improper Handling of Alternate Encoding	<38.0.0-r0
M Improper Validation of Certificate with Host Mismatch	<38.0.0-r0
H Resource Exhaustion	<38.0.0-r0
H HTTP Request Smuggling	*
C HTTP Request Smuggling	<38.0.0-r0
C HTTP Request Smuggling	*
L CVE-2025-14813	<38.0.0-r0
L Allocation of Resources Without Limits or Throttling	<38.0.0-r0
C HTTP Request Smuggling	<38.0.0-r0
H Resource Exhaustion	*
L CVE-2024-25638	<38.0.0-r0
L CVE-2025-48734	<38.0.0-r0
H CVE-2023-52428	<38.0.0-r0
C HTTP Request Smuggling	*
H Out-of-bounds Write	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
L Race Condition	<38.0.0-r0
L Improper Verification of Cryptographic Signature	<38.0.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Resource Exhaustion	*
L Improper Validation of Certificate with Host Mismatch	*
H Deserialization of Untrusted Data	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
C Insufficient Verification of Data Authenticity	<38.0.0-r0
M CVE-2021-22569	<38.0.0-r0
L Incomplete Blacklist	*
L CVE-2026-5598	<38.0.0-r0
L Privilege Defined With Unsafe Actions	*
L Incomplete Blacklist	*
H Uncontrolled Recursion	<38.0.0-r0
H Deserialization of Untrusted Data	*
L GHSA-47qp-hqvx-6r3f	*
L Information Exposure	*
C Improper Input Validation	<38.0.0-r0
M Cross-site Request Forgery (CSRF)	<38.0.0-r0
L GHSA-2r2c-cx56-8933	*
H CVE-2022-3509	<38.0.0-r0
H Deserialization of Untrusted Data	*
H Deserialization of Untrusted Data	*
L Missing Release of Resource after Effective Lifetime	<38.0.0-r0
H CVE-2022-3510	<38.0.0-r0
L Improper Access Control	<38.0.0-r0
H Resource Exhaustion	*
L Resource Exhaustion	*
H Out-of-bounds Write	<38.0.0-r0
L Allocation of Resources Without Limits or Throttling	<38.0.0-r0
C Insufficient Verification of Data Authenticity	<38.0.0-r0
L Stack-based Buffer Overflow	*
L Deserialization of Untrusted Data	<38.0.0-r0
H Deserialization of Untrusted Data	*
C HTTP Request Smuggling	*
C Deserialization of Untrusted Data	<37.0.0-r1

Vulnerability

Vulnerable Version

Uncontrolled Memory Allocation

<38.0.0-r0