| CVE-2026-73322 |
Incorrect Authorization vulnerability in the single-stage query engine of Apache Pinot
|
Not rated
|
Oct 30, 2026 |
| CVE-2024-56325 |
Authentication Bypass Issue
If the path does not contain / and contain., authentication is not required
|
Not rated
|
Apr 1, 2025 |
| CVE-2024-39676 |
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in Apache Pinot
|
Not rated
|
Jul 24, 2024 |
| CVE-2022-26112 |
In 0.10.0 or older versions of Apache Pinot, Pinot query endpoint and realtime ingestion layer has a vulnerability in…
|
9.8
Critical
|
Sep 23, 2022 |
| CVE-2022-23974 |
In 0.9.3 or older versions of Apache Pinot segment upload path allowed segment directories to be imported into pinot…
|
Not rated
|
Apr 5, 2022 |