AS
Product
Apache SIS
2
CVEs
0
On KEV
5.4
Max CVSS
2
New 30D
Severity mix
Critical 0High 0Medium 1Low 0
Watch
Add Apache SIS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-110733 New | 5.4 | Oct 26 | Apache SIS: SQL injection via unvalidated ORDER BY sort expression in the SQL feature store Affected: 1.0 through 1.6.0 |
| CVE-2026-110748 New | – | Oct 26 | Apache SIS: CWE-22: improper limitation of paths to GML, GeoTIFF, NADCON or NTv2 files Affected: 0.7 through 1.6.0 |
Showing 2