Product

org.apache.flink/flink-table-api-java vulnerabilities

1 published CVE affecting org.apache.flink/flink-table-api-java, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total: 1
Critical: 0
High: 1
Medium: 0
Low: 0
Unscored: 0
CISA KEV: 0

Latest org.apache.flink/flink-table-api-java CVEs

Newest publication first

CVE-2026-35194 Apache Flink: Remote code execution via SQL injection in code generation
Published 2026-05-15

HighCVSS 8.1

Code injection in SQL code generation in Apache Flink 1.15.0 through 1.20.x and 2.0.0 through 2.x allows authenticated users with query submission privileges to execute arbitrary code on TaskManagers via maliciously crafted SQL queries. The vulnerability affects JSON functions (1...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.

org.apache.flink/flink-table-api-java vulnerabilities

Latest org.apache.flink/flink-table-api-java CVEs

CVE-2026-35194 Apache Flink: Remote code execution via SQL injection in code generation