Fluss (Apache) - vulnerabilities (CVEs)

1 CVEs, 0 in the last 30 days, 20 known versions, newest CVE from 2026-06-01. Vendor: Apache.

CVEs of Fluss

• CVE-2026-49361 - CVSS 7.5 (high), 2026-06-01: Apache Fluss versions prior to 0.9.1 configure the Netty LengthFieldBasedFrameDecoder with Integer.MAX_VALUE as the maximum frame length, allowing…