org.apache.streampark:streampark@2.1.5 vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the org.apache.streampark:streampark package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free
Vulnerability Vulnerable Version
  • M
Insufficient Session Expiration

Affected versions of this package are vulnerable to Insufficient Session Expiration due to improper session management. An attacker can maintain access and perform unauthorized actions by using the Authorization token even after the user has logged out.

How to fix Insufficient Session Expiration?

A fix was pushed into the master branch but not yet published.

[0,)
  • M
SQL Injection

Affected versions of this package are vulnerable to SQL Injection. An attacker can cause information leakage by supplying malicious parameters to the jobName field.

How to fix SQL Injection?

A fix was pushed into the master branch but not yet published.

[0,)