io.crate:crate vulnerabilities

CVEs whose affected-version data names the io.crate:crate package (maven). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-49989Low

1mo ago

CrateDB is a distributed SQL database

CrateDB is a distributed SQL database. Prior to versions 6.2.8 and 6.3.2, any authenticated user can read or delete any blob whose SHA-1 digest they know, and can plant new blobs unconditionally, in any blob table, regardless of `GRANT`s…

▾ Sunlitcrate · io.crate:crateEPSS 0.33%via NVD