Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 03:12:38 +0000 EUVD-2026-260075 https://cve.radiocsirt.org/vuln/euvd-2026-260075 EUVD-2026-260075 https://cve.radiocsirt.org/vuln/euvd-2026-260075 fkie_cve-2025-62228 https://cve.radiocsirt.org/vuln/fkie_cve-2025-62228 <p>Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.</p> <p>Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend users update Flink CDC version to 3.5.0 which address this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-62228 GHSA-wqm3-w3p6-xjgm — Apache Flink CDC is vulnerable to SQL Injection through maliciously crafted identifiers https://cve.radiocsirt.org/vuln/ghsa-wqm3-w3p6-xjgm <p><strong>Affected:</strong> Maven: org.apache.flink:flink-cdc-pipeline-connectors, Maven: org.apache.flink:flink-connector-oracle-cdc, Maven: org.apache.flink:flink-connector-db2-cdc, Maven: org.apache.flink:flink-connector-sqlserver-cdc, Maven: org.apache.flink:flink-connector-mysql-cdc</p> <p>Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0 which address this issue.</p> <p><strong>Affected:</strong> Maven: org.apache.flink:flink-cdc-pipeline-connectors, Maven: org.apache.flink:flink-connector-oracle-cdc, Maven: org.apache.flink:flink-connector-db2-cdc, Maven: org.apache.flink:flink-connector-sqlserver-cdc, Maven: org.apache.flink:flink-connector-mysql-cdc</p> <p>Apache Flink CDC version 3.0.0 to before 3.5.0 are vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, users are recommended to update Flink CDC version to 3.5.0 which address this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-wqm3-w3p6-xjgm