~ / search / GHSA-c2rv-hwqm-wjpg

GHSA-c2rv-hwqm-wjpg

Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes

Source: GitHub Advisory Database (reviewed) Moderate CVE-2026-46718

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.calcite:calcite-core >= 1.5.0, < 1.42.0 1.42.0

Details

As written in the advisory (Markdown source, shown as plain text).

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue.

References

External links from the advisory. They lead to third-party sites.