Shardingsphere (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 14 known versions, newest CVE from 2023-07-19. Vendor: Apache.

CVEs of Shardingsphere

• CVE-2023-28754 - CVSS 8.8 (high), 2023-07-19: Deserialization of Untrusted Data vulnerability in Apache ShardingSphere-Agent, which allows attackers to execute arbitrary code by constructing a special…
• CVE-2022-45347 - CVSS 9.8 (critical), 2022-12-22: Apache ShardingSphere-Proxy prior to 5.3.0 when using MySQL as database backend didn't cleanup the database session completely after client authentication…
• CVE-2020-1947 - CVSS 9.8 (critical), 2020-03-11: In Apache ShardingSphere(incubator) 4.0.0-RC3 and 4.0.0, the ShardingSphere's web console uses the SnakeYAML library for parsing YAML inputs to load…