org.apache.druid:druid-core (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.apache.druid:druid-core, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (3)

• CVE-2021-26920 — CVSS 6.5 (medium): In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows…
• CVE-2021-36749 — CVSS 6.5 (medium): In the Druid ingestion system, the InputSource is used for reading data from a certain data source. However, the HTTP InputSource allows…
• CVE-2023-26920 — CVSS 6.5 (medium): fast-xml-parser before 4.1.2 allows __proto__ for Prototype Pollution.