Flink-extended vulnerabilities
We track 1 vulnerability in Flink-extended products across 2 products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on January 27, 2024.
1vulnerabilities
1critical
0high
0exploited
9.8average CVSS score
Latest Flink-extended vulnerabilities
- 9.8 Critical severity
ai-flow: Deserialization of Untrusted Data
A vulnerability was found in flink-extended ai-flow 0.3.1. It has been declared as critical. Affected by this vulnerability is the function cloudpickle.loads of the file \ai_flow\cli\commands\workflow_command.py. The manipulation leads to deserialization. The