Apache Uniffle (Apache Software Foundation) - vulnerabilities (CVEs)
1 CVEs, 0 in the last 30 days, 1 known versions, newest CVE from 2026-01-07. Vendor: Apache Software Foundation.
CVEs of Apache Uniffle
- CVE-2025-68637 - CVSS 9.1 (critical), 2026-01-07: The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default. This insecure configuration exposes all…
