org.openrefine:database (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.openrefine:database, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2023-41887 — CVSS 9.8 (critical): OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability…
• CVE-2024-47881 — CVSS 8.1 (high): OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the…
• CVE-2023-41886 — CVSS 7.5 (high): OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability…
• CVE-2024-23833 — CVSS 7.5 (high): OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in…