Apache Apache Flink
3 CVEs affecting Apache Apache Flink. Latest disclosed: 2026-05-15. Critical: 0, High: 3.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-35194 | High | 8.1 | 2026-05-15 | Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges t… |
CVE-2020-17519 | High | 7.5 | 2021-01-05 | A change introduced in Apache Flink 1.11.0 (and released in 1.11.1 and 1.11.2 as well) allows attackers to read any file on the local filesystem of the JobMana… |
CVE-2020-17518 | High | 7.5 | 2021-01-05 | Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously… |