Apache Calcite Avatica (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-09-22. Vendor: Apache Software Foundation.

CVEs of Apache Calcite Avatica

• CVE-2026-70410 - CVSS 8.8 (high), 2026-09-22: Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite Avatica. Plugin instantiation (via…
• CVE-2022-36364 - CVSS 8.8 (high), 2022-07-28: Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver…