Helix (Apache) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 40 known versions, newest CVE from 2026-07-09. Vendor: Apache.

CVEs of Helix

• CVE-2026-57111 - CVSS 7.5 (high), 2026-07-09: Permissive Cross-Origin Resource Sharing (CORS) in the REST API (helix-rest, org.apache.helix.rest.server.filters.CORSFilter) in Apache Helix through 2.0.0 on…
• CVE-2024-22281 - CVSS 7.5 (high), 2024-08-20: ** UNSUPPORTED WHEN ASSIGNED ** The Apache Helix Front (UI) component contained a hard-coded secret, allowing an attacker to spoof sessions by generating…
• CVE-2023-38647 - CVSS 9.8 (critical), 2023-07-26: An attacker can use SnakeYAML to deserialize java.net.URLClassLoader and make it load a JAR from a specified URL, and then deserialize…
• CVE-2022-47500 - CVSS 6.1 (medium), 2022-12-19: URL Redirection to Untrusted Site ('Open Redirect') vulnerability in Apache Software Foundation Apache Helix UI component.This issue affects Apache Helix all…