Pig vulnerabilities

2 known vulnerabilities in Pig from Pig4cloud. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.6 Critical severity

  Pig: Improper Authorization

  CVE-2025-63691Nov 7, 2025Pig4cloud

  In pig-mesh In Pig version 3.8.2 and below, within the Token Management function under the System Management module, the token query interface (/api/admin/sys-token/page) has an improper permission verification issue, which leads to information leakage. This i

• 9.1 Critical severity

  Pig: Use of Externally-Controlled Input to Select Classes or Code

  CVE-2025-63690Nov 7, 2025Pig4cloudEPSS 1.06%

  In pig-mesh Pig versions 3.8.2 and below, when setting up scheduled tasks in the Quartz management function under the system management module, it is possible to execute any Java class with a parameterless constructor and its methods with parameter type String