Apache Apache Calcite Avatica
2 CVEs affecting Apache Apache Calcite Avatica. Latest disclosed: 2026-09-22. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-70410 | High | 8.8 | 2026-09-22 | Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite Avatica. Plugin instantiation (via AvaticaUt… |
CVE-2022-36364 | High | 8.8 | 2022-07-28 | Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver d… |