apache-druid-fips

Direct Vulnerabilities

Known vulnerabilities in the apache-druid-fips package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
L Uncontrolled Memory Allocation	<38.0.0-r0
L Uncontrolled Memory Allocation	<38.0.0-r0
L Improper Access Control	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
H Improper Encoding or Escaping of Output	<38.0.0-r0
M Improper Input Validation	<38.0.0-r0
H HTTP Response Splitting	<38.0.0-r0
L Creation of Temporary File With Insecure Permissions	<38.0.0-r0
C Improper Check for Unusual or Exceptional Conditions	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
M Loop with Unreachable Exit Condition ('Infinite Loop')	<38.0.0-r0
L Improper Input Validation	<38.0.0-r0
H CVE-2022-3171	<38.0.0-r0
H Algorithmic Complexity	<38.0.0-r0
L NULL Pointer Dereference	<38.0.0-r0
H Information Exposure Through Caching	<38.0.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	<38.0.0-r0
L Use of Non-Canonical URL Paths for Authorization Decisions	<38.0.0-r0
L Uncontrolled Recursion	<38.0.0-r0
L Improper Input Validation	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
H Resource Exhaustion	<38.0.0-r0
H Improper Encoding or Escaping of Output	<38.0.0-r0
L Use of Insufficiently Random Values	<38.0.0-r0
L Integer Overflow or Wraparound	<38.0.0-r0
L GHSA-58qw-p7qm-5rvh	<38.0.0-r0
M Improper Input Validation	<38.0.0-r0
L Out-of-bounds Write	<38.0.0-r0
H Allocation of Resources Without Limits or Throttling	<38.0.0-r0
H Resource Exhaustion	<38.0.0-r0
C Improper Handling of Alternate Encoding	<38.0.0-r0
L Information Exposure	<38.0.0-r0
H Out-of-bounds Write	<38.0.0-r0
L CRLF Injection	<38.0.0-r0
M Allocation of Resources Without Limits or Throttling	<38.0.0-r0
H Missing Release of Resource after Effective Lifetime	<38.0.0-r0
H Improper Output Neutralization for Logs	<38.0.0-r0
L Information Exposure	<38.0.0-r0
L Information Exposure	<38.0.0-r0
H HTTP Request Smuggling	<38.0.0-r0
L HTTP Request Smuggling	<38.0.0-r0
M HTTP Request Smuggling	<38.0.0-r0
L Information Exposure Through Server Log Files	<38.0.0-r0
M Allocation of Resources Without Limits or Throttling	<38.0.0-r0
M CRLF Injection	<38.0.0-r0
M Improper Handling of Length Parameter Inconsistency	<38.0.0-r0
M Improper Validation of Certificate with Host Mismatch	<38.0.0-r0
H HTTP Request Smuggling	<38.0.0-r0
L Out-of-bounds Write	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
H HTTP Request Smuggling	*
C HTTP Request Smuggling	*
C HTTP Request Smuggling	<38.0.0-r0
H Uncontrolled Recursion	<38.0.0-r0
L Resource Exhaustion	<38.0.0-r0
L Information Exposure	*
H CVE-2023-52428	<38.0.0-r0
L Allocation of Resources Without Limits or Throttling	<38.0.0-r0
L Improper Access Control	<38.0.0-r0
H Resource Exhaustion	*
H Out-of-bounds Write	<38.0.0-r0
L Incomplete Blacklist	*
M CVE-2021-22569	<38.0.0-r0
H Deserialization of Untrusted Data	*
L Improper Validation of Certificate with Host Mismatch	*
L Resource Exhaustion	<38.0.0-r0
L Race Condition	<38.0.0-r0
L Missing Release of Resource after Effective Lifetime	<38.0.0-r0
C HTTP Request Smuggling	*
L Improper Verification of Cryptographic Signature	<38.0.0-r0
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
L CVE-2024-25638	<38.0.0-r0
H Resource Exhaustion	*
C Insufficient Verification of Data Authenticity	<38.0.0-r0
H CVE-2022-3509	<38.0.0-r0
C HTTP Request Smuggling	<38.0.0-r0
M Cross-site Request Forgery (CSRF)	<38.0.0-r0
L GHSA-2r2c-cx56-8933	*
L CVE-2025-48734	<38.0.0-r0
C Insufficient Verification of Data Authenticity	<38.0.0-r0
H CVE-2022-3510	<38.0.0-r0
C Improper Input Validation	<38.0.0-r0
L Incomplete Blacklist	*
L Stack-based Buffer Overflow	*
H Resource Exhaustion	*
L GHSA-47qp-hqvx-6r3f	*
H Out-of-bounds Write	<38.0.0-r0
H Deserialization of Untrusted Data	<38.0.0-r0
H Deserialization of Untrusted Data	*
L Resource Exhaustion	*
L Allocation of Resources Without Limits or Throttling	<38.0.0-r0
C HTTP Request Smuggling	*
L Deserialization of Untrusted Data	<38.0.0-r0
H Deserialization of Untrusted Data	*
C Deserialization of Untrusted Data	<37.0.0-r1

Vulnerability

Vulnerable Version

Uncontrolled Memory Allocation

<38.0.0-r0