Pinot (Apache) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 22 known versions, newest CVE from 2025-04-01. Vendor: Apache.

CVEs of Pinot

• CVE-2024-56325 - CVSS 9.8 (critical), 2025-04-01: Authentication Bypass Issue If the path does not contain / and contain., authentication is not required. Expected Normal Request and Response Example curl -X…
• CVE-2024-39676 - CVSS 7.5 (high), 2024-07-24: Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot. This issue affects Apache Pinot: from 0.1 before 1.0.0. Users are…
• CVE-2022-26112 - CVSS 9.8 (critical), 2022-09-23: In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in unprotected environments due to a groovy…
• CVE-2022-23974 - CVSS 7.5 (high), 2022-04-05: In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot tables. In pinot installations that allow…