Calcite (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 82 known versions, newest CVE from 2026-06-02. Vendor: Apache.

CVEs of Calcite

• CVE-2026-46718 - CVSS 6.5 (medium), 2026-06-02: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from…
• CVE-2022-39135 - CVSS 9.8 (critical), 2022-09-11: Apache Calcite 1.22.0 introduced the SQL operators EXISTS_NODE, EXTRACT_XML, XML_TRANSFORM and EXTRACT_VALUE do not restrict XML External Entity references in…
• CVE-2020-13955 - CVSS 5.9 (medium), 2020-10-09: HttpUtils#getURLConnection method disables explicitly hostname verification for HTTPS connections making clients vulnerable to man-in-the-middle attacks.…