CVE-2026-41041
1 advisory.
PyPI/apache-gravitino CVE-2026-41041: critical 9.1, EPSS 0.60%
URL path injection via unencoded user-supplied identifiers vulnerability in Apache Gravitino.
Action: Upgrade apache-gravitino to 1.2.1 or later.
pip install apache-gravitino==1.2.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.0 | 1.2.1 | - |
Fixed versions
| 1.2.1 |
Sources
- osv: PYSEC-2026-3441
- http://www.openwall.com/lists/oss-security/2026/07/13/1
- https://lists.apache.org/thread/4dnwg1qzb2yns1fkfmq0z45vmwyzytgz
CVE-2026-41041 · published · modified · JSON