FL
Product
Flink
On CISA KEVExploited in the wild
4
CVEs
1
On KEV
8.1
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 1Low 0
Watch
Add Flink to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2020-17519 In wildKEV | 7.5 | Jan 5 | Apache Flink directory traversal attack: reading remote files through the REST API Affected: 1.11.0 before 1.11.3 |
| CVE-2026-35194 | 8.1 | May 15 | Apache Flink: Remote code execution via SQL injection in code generation Affected: 1.15.0 before 1.20.4; 2.0.0 before 2.0.2; 2.1.0 before 2.1.2; 2.2.0; 2.2.0; 2.2.0 |
| CVE-2020-17518 | 7.5 | Jan 5 | Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the local file system, through a maliciously modified HTTP… Affected: 1.5.1 before 1.11.3 |
Showing 3