Maven package
org.apache.heron/heron-simulator
pkg:maven/org.apache.heron/heron-simulator
Vulnerabilities (1)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-1964 | Cri | 9.8 | >= 0.20.0-incubating, < 0.20.3-incubating | 0.20.3-incubating | Apr 16, 2020 | It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerabilities (CWE-502: Deserialization of Unt |
- affected >= 0.20.0-incubating, < 0.20.3-incubatingfixed 0.20.3-incubating
It was noticed that Apache Heron 0.20.2-incubating, Release 0.20.1-incubating, and Release v-0.20.0-incubating does not configure its YAML parser to prevent the instantiation of arbitrary types, resulting in a remote code execution vulnerabilities (CWE-502: Deserialization of Unt