Apache Calcite is Vulnerable to Use of Externally-Controlled Input to Select Classes

보통 6.5CVE-2026-46718 · GHSA-c2rv-hwqm-wjpg · Published 02/06/2026 · updated 22/07/2026

요약

CVE-2026-46718은(는) org.apache.calcite:calcite-core, calcite (apache)에 영향을 주는 보통 (CVSS 6.5) 취약점입니다.
향후 30일 내 악용 확률(EPSS): 0.44%, 전체 취약점의 38.0%보다 높음.
조치: 1.42.0 이상으로 업데이트하세요.

Package	Affected versions	Patched versions
org.apache.calcite:calcite-core Maven	`≥ 1.5.0, < 1.42.0`	`1.42.0`
calcite apache	`≥ 1.5.0, < 1.42.0`	`1.42.0`

Description

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.

This issue affects Apache Calcite: from 1.5.0 before 1.42.

Users are recommended to upgrade to version 1.42, which fixes the issue.

NVD description

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite. This issue affects Apache Calcite: from 1.5.0 before 1.42. Users are recommended to upgrade to version 1.42, which fixes the issue.

References

nvd.nist.gov/vuln/detail/CVE-2026-46718 · ADVISORY
apache/calcite commit 5855cfa · WEB
apache/calcite · PACKAGE
issues.apache.org/jira/browse/CALCITE-7532 · WEB
lists.apache.org/thread/9s37svo343w5ck1ovh478lkzcqk4949v · WEB
openwall.com/lists/oss-security/2026/06/01/7 · WEB

org.apache.calcite:calcite-core의 다른 취약점

모두 보기 →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

org.apache.calcite:calcite-core

Maven

≥ 1.5.0, < 1.42.0

1.42.0

calcite

apache

≥ 1.5.0, < 1.42.0

1.42.0

Description

Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Apache Calcite.

This issue affects Apache Calcite: from 1.5.0 before 1.42.

Users are recommended to upgrade to version 1.42, which fixes the issue.

NVD description

org.apache.calcite:calcite-core의 다른 취약점

모두 보기 →