← All credits

Junjie Li (Xidian University, https://github.com/jackieya)

1 vulnerability record and advisories credit this contributor.

CVE-2026-41042
Apache Gravitino: Unauthenticated callers can supply a malicious H2 JDBC URL through the testConnection API, which executes arbitrary Java code on the server via H2's INIT parameter