Vulnerabilities of Apache Software Foundation Apache Flink
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-35194 | Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated… | Not rated | May 15, 2026 |
| CVE-2020-17519 | Exploited Apache Flink Improper Access Control Vulnerability | 9.1 Critical | Jan 5, 2021 |
| CVE-2020-17518 | Apache Flink 1.5.1 introduced a REST handler that allows you to write an uploaded file to an arbitrary location on the… | Not rated | Jan 5, 2021 |