org.apache.streampipes:streampipes-parent (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.apache.streampipes:streampipes-parent, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (6)

• CVE-2023-31469 — CVSS 8.8 (high): A REST interface in Apache StreamPipes (versions 0.69.0 to 0.91.0) was not properly restricted to admin-only access. This allowed a…
• CVE-2024-31411 — CVSS 8.8 (high): Unrestricted Upload of File with dangerous type vulnerability in Apache StreamPipes. Such a dangerous type might be an executable file that…
• CVE-2025-47411 — CVSS 8.1 (high): A user with a legitimate non-administrator account can exploit a vulnerability in the user ID creation mechanism in Apache StreamPipes that…
• CVE-2024-24778 — CVSS 6.5 (medium): Improper privilege management in a REST interface allowed registered users to access unauthorized resources if the resource ID was know…
• CVE-2024-31979 — CVSS 4.3 (medium): Server-Side Request Forgery (SSRF) vulnerability in Apache StreamPipes during installation process of pipeline elements. Previously…
• CVE-2024-30471 — CVSS 3.7 (low): Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache StreamPipes in user self-registration. This allows an attacker to…