Login Request a demo
FL
Product
Flink
by Apache · last CVE May 15, 2026
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities4In the news0Timeline
Severity mix
Critical 0High 3Medium 1Low 0
Severity
All severities4Critical0High3Medium1Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Flink to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-17519
In wildKEV
7.5
98%
Jan 5
Apache Flink directory traversal attack: reading remote files through the REST API
Affected: 1.11.0 before 1.11.3
CVE-2026-35194
8.1
0%
May 15
Apache Flink: Remote code execution via SQL injection in code generation
Affected: 1.15.0 before 1.20.4; 2.0.0 before 2.0.2; 2.1.0 before 2.1.2; 2.2.0; 2.2.0; 2.2.0
CVE-2020-17518
7.5
49%
Jan 5
Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP…
Affected: 1.5.1 before 1.11.3
CVE-2020-1960
4.7
1%
May 14
A vulnerability in Apache Flink (1.1.0 to 1.1.5, 1.2.0 to 1.2.1, 1.3.0 to 1.3.3, 1.4.0 to 1.4.2, 1.5.0 to 1.5.6, 1.6.0 to 1.6.4, 1.7.0 to 1.7.2, 1.8.0 to 1.8.3, 1.9.0 to 1.9.2,…
Affected: 1.1.0 through 1.1.5; 1.2.0 through 1.2.1; 1.3.0 through 1.3.3; 1.4.0 through 1.4.2; 1.5.0 through 1.5.6; 1.6.0 through 1.6.4; +4 more
Showing 4