Calcite vulnerabilities

1 known vulnerability in Calcite from Apache. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Apache Calcite: Improper Restriction of XML External Entity Reference

  CVE-2022-39135Sep 11, 2022ApacheEPSS 2.25%

  Apache Calcite 1.22.0 introduced the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML External Entity references in their configuration, making them vulnerable to a potential XML External Entity (XXE) attack. Therefor