zeppelin vulnerabilities

CVEs whose affected-version data names the zeppelin package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-44613Medium· 6.1PoC

1mo ago

Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin

Cross-Site Request Forgery (CSRF) vulnerability in Apache Zeppelin. The default CORS configuration allowed cross-origin state-changing requests and accepted text/plain request bodies, allowing an attacker who lures an authenticated user …

▾ Twilightapache · zeppelinEPSS 0.36%via NVD