CVE-2021-26919
1 advisory.
Maven/org.apache.druid:druid CVE-2021-26919: high 8.8
Arbitrary code execution in Apache Druid
Action: Upgrade org.apache.druid:druid to 0.20.2 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.20.2 | - |
Fixed versions
| 0.20.2 |
Sources
- osv: GHSA-jj4f-p7vv-j4v9
- https://nvd.nist.gov/vuln/detail/CVE-2021-26919
- https://github.com/apache/druid/commit/48953e3508967f5156c69676432b5d4dd25ea678
- https://github.com/apache/druid
- https://github.com/apache/druid/releases/tag/druid-0.20.2
- https://lists.apache.org/thread.html/r443e2916c612fbd119839c0fc0729327d6031913a75081adac5b43ad@%3Cdev.druid.apache.org%3E
- https://lists.apache.org/thread.html/r470f8c92eb5df45f41b3ae609b6315b6c5ff51b3ceb2f09f00ca620f@%3Cdev.druid.apache.org%3E
- https://lists.apache.org/thread.html/r6bc68264170046448f823d12c17fd1fd875251d97d60869f58709872@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/r7a531ec123570cb7875ff991cf115f99e9ef99a48b3cf3fa4f9d9864@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/ra85fa7d31f9bec1148ffd2e4030934927caa8bff89bca9f61f75e697@%3Cdev.druid.apache.org%3E
- https://lists.apache.org/thread.html/rd87451fce34df54796e66321c40d743a68fb4553d72e7f6f0bc62ebd%40%3Cdev.druid.apache.org%3E
- https://lists.apache.org/thread.html/re0910cf4c784897774427fecd95912fb565a6bd06d924a55e70bbbfc@%3Ccommits.druid.apache.org%3E
- https://lists.apache.org/thread.html/re4c5deb0aae4bace69844d15c9fd1699e907ebfee93bc3926474d110@%3Cdev.druid.apache.org%3E
- https://lists.apache.org/thread.html/rf3ea2a4018e87e6c45d36cf8479af7727dcc276edabd2f7cf59e0c5f@%3Cdev.druid.apache.org%3E
CVE-2021-26919 · published · modified · JSON