Apache Software Foundation Calcite vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Apache Software Foundation Calcite: 1 record(s), with affected versions and fixes.cpe:2.3:a:apache:calcite
CVE-2026-46718
Medium · 6.5
CWE-470 Jun 2, 2026
Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution
Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.
This issue affects Apache Calcite: from 1.5.0 before 1.42.
Users are recommended to upgrade to version 1.42, which fixes the issue.