CVE-2020-1964
1 advisory.
Maven/org.apache.heron:heron-simulator CVE-2020-1964: critical 9.8, EPSS 4.81%
Deserialization of Untrusted Data in Apache Heron
Action: Upgrade org.apache.heron:heron-simulator to 0.20.3-incubating or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0.20.0-incubating | 0.20.3-incubating | - |
Fixed versions
| 0.20.3-incubating |
Sources
- osv: GHSA-hjgm-f7vx-m5g7
- https://nvd.nist.gov/vuln/detail/CVE-2020-1964
- https://lists.apache.org/thread.html/r16dd39f4180e4443ef4ca774a3a5a3d7ac69f91812c183ed2a99e959%40%3Cdev.heron.apache.org%3E
- https://lists.apache.org/thread.html/rd43ae18588fd7bdb375be63bc95a651aab319ced6306759e1237ce67@%3Cdev.ignite.apache.org%3E
- https://lists.apache.org/thread.html/re7b43cf8333ee30b6589e465f72a6ed4a082222612d1a0fdd30beb94@%3Cdev.ignite.apache.org%3E
- https://lists.apache.org/thread.html/re7b43cf8333ee30b6589e465f72a6ed4a082222612d1a0fdd30beb94@%3Cuser.ignite.apache.org%3E
- https://lists.apache.org/thread.html/rf032a13a4711f88c0a2c0734eecbee1026cc1b6cde27d16a653f8755@%3Cdev.ignite.apache.org%3E
CVE-2020-1964 · published · modified · JSON