https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T05:51:29.395629+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-260075 EUVD-2026-260075 2026-10-10T05:51:29.441053+00:00 EUVD-2026-260075 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62228 fkie_cve-2025-62228 2026-10-10T05:51:29.441092+00:00

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.

 https://cve.radiocsirt.org/vuln/ghsa-wqm3-w3p6-xjgm GHSA-wqm3-w3p6-xjgm — Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers 2026-10-10T05:51:29.441125+00:00

Affected: Maven: org.apache.flink:flink-cdc-pipeline-connectors, Maven: org.apache.flink:flink-connector-oracle-cdc, Maven: org.apache.flink:flink-connector-db2-cdc, Maven: org.apache.flink:flink-connector-sqlserver-cdc, Maven: org.apache.flink:flink-connector-mysql-cdc

Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0 which address this issue.