Known vulnerabilities in Apache Software Foundation Apache Uniffle
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-68637 | The Uniffle HTTP client is configured to trust all SSL certificates and disables hostname verification by default | Not rated | Jan 7, 2026 |