Apache Calcite Avatica
Apache · 2 CVEs
CVE-2026-70410
HIGH
Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins
Sep 22, 2026
CVE-2022-36364
HIGH
Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector
Jul 28, 2022
| CVE ID | Description | Severity | EPSS | Published |
|---|---|---|---|---|
| CVE-2026-70410 | Apache Calcite Avatica: Unrestricted class initialization when instantiating plugins | HIGH | 0.64% | Sep 22, 2026 |
| CVE-2022-36364 | Apache Calcite Avatica JDBC driver `httpclient_impl` connection property can be used as an RCE vector | HIGH | 3.20% | Jul 28, 2022 |
Showing 1 to 2 of 2 CVEs