Login Request a demo
AF
Product
Apache Flink
by Apache Software Foundation · last CVE May 15, 2026
On CISA KEVExploited in the wild
2
CVEs
1
On KEV
8.1
Max CVSS
0
New 30D
Vulnerabilities2In the news0Timeline
Severity mix
Critical 0High 2Medium 0Low 0
Severity
All severities2Critical0High2Medium0Low0
Exploitation
On CISA KEV1Exploited in the wild1
Watch

Add Apache Flink to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-17519
In wildKEV
7.5
98%
Jan 5
Apache Flink directory traversal attack: reading remote files through the REST API
Affected: Apache Flink 1.11.0 to 1.11.2
CVE-2026-35194
8.1
0%
May 15
Apache Flink: Remote code execution via SQL injection in code generation
Affected: 1.15.0 before 1.20.4,2.0.2,2.1.2,2.2.1
Showing 2