https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 06 Oct 2026 19:36:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-366552 EUVD-2026-366552 https://cve.radiocsirt.org/vuln/euvd-2026-366552 https://cve.radiocsirt.org/vuln/fkie_cve-2026-54048 <p>Specifying tblproperties(&#39;avro.schema.url&#39;=&#39; http://...&#39; ) or with a &#39;file:///&#39; URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error messages. Users are recommended to upgrade to version 4.5.2, which fixes this issue.</p> <p>Specifying tblproperties(&#39;avro.schema.url&#39;=&#39; http://...&#39; ) or with a &#39;file:///&#39; URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error messages. Users are recommended to upgrade to version 4.5.2, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-54048 https://cve.radiocsirt.org/vuln/ghsa-mjfw-8c8c-xr6h <p>Specifying tblproperties(&#39;avro.schema.url&#39;=&#39; http://...&#39; ) or with a &#39;file:///&#39; URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error messages. Users are recommended to upgrade to version 4.5.2, which fixes this issue.</p> <p>Specifying tblproperties(&#39;avro.schema.url&#39;=&#39; http://...&#39; ) or with a &#39;file:///&#39; URI on a table in Impala 2.0.0 to 4.5.1 on all platforms allows an attacker to trigger a GET request to internal endpoints they may not have access to but that Impala does and the response my be exposed via parsing error messages. Users are recommended to upgrade to version 4.5.2, which fixes this issue.</p> https://cve.radiocsirt.org/vuln/ghsa-mjfw-8c8c-xr6h