https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-16T20:56:25.691902+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cnvd-2024-02174 cnvd-2024-02174 2026-10-16T20:56:25.695080+00:00 cnvd-2024-02174 https://cve.radiocsirt.org/vuln/euvd-2026-8470 EUVD-2026-8470 2026-10-16T20:56:25.695112+00:00 EUVD-2026-8470 https://cve.radiocsirt.org/vuln/fkie_cve-2023-30867 fkie_cve-2023-30867 2026-10-16T20:56:25.695127+00:00

In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.

Mitigation:

Users are recommended to upgrade to version 2.1.2, which fixes the issue.

 https://cve.radiocsirt.org/vuln/ghsa-rrcg-jwr5-32g7 GHSA-rrcg-jwr5-32g7 — Apache StreamPark: Authenticated system users could trigger SQL injection vulnerability 2026-10-16T20:56:25.695159+00:00

Affected: Maven: org.apache.streampark:streampark

In the Streampark platform, when users log in to the system and use certain features, some pages provide a name-based fuzzy search, such as job names, role names, etc. The sql syntax :select * from table where jobName like '%jobName%'. However, the jobName field may receive illegal parameters, leading to SQL injection. This could potentially result in information leakage.

Mitigation:

Users are recommended to upgrade to version 2.1.2, which fixes the issue.

 https://cve.radiocsirt.org/vuln/gsd-2023-30867 gsd-2023-30867 2026-10-16T20:56:25.695186+00:00 gsd-2023-30867