VYPR

Maven package

org.apache.calcite.avatica/avatica-core

pkg:maven/org.apache.calcite.avatica/avatica-core

Vulnerabilities (1)

  • CVE-2022-36364Jul 28, 2022
    affected < 1.22.0fixed 1.22.0

    Apache Calcite Avatica JDBC driver creates HTTP client instances based on class names provided via `httpclient_impl` connection property; however, the driver does not verify if the class implements the expected interface before instantiating it, which can lead to code execution l