flink_cdc vulnerabilities

CVEs whose affected-version data names the flink_cdc package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2025-62228High· 8.8

1y ago

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg

Apache Flink CDC version 3.4.0 was vulnerable to a SQL injection via maliciously crafted identifiers eg. crafted database name or crafted table name. Even through only the logged-in database user can trigger the attack, we recommend user…

▾ Twilightapache · flink_cdcEPSS 0.46%via NVD