Maven package intelligence

org.apache.druid:druid Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting the Maven package org.apache.druid:druid, including the gap beyond CISA KEV, confidence assessments, and sensor observations.

Watch This Package Browse org.apache.druid:druid KEVs Full KEV feed

Total KEVs: 1; Known exploited vulnerability affecting org.apache.druid:druid
In CISA KEV: 0; Records also listed in the official catalog
Beyond CISA KEV: 1; Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed: 0; org.apache.druid:druid KEVs with sensor-observed exploitation activity

Review org.apache.druid:druid exploitation against the versions you run

One of the one exploited org.apache.druid:druid vulnerabilities tracked here are not in CISA KEV.

0%
Covered by CISA: 100%
Beyond CISA

Attested org.apache.druid:druid vulnerabilities

1 known exploited vulnerability affecting this package.

Vulnerability	CISA KEV	Added
CVE-2021-25646 Authenticated users can override system configurations in their requests which allows them to execute arbitrary code.	Beyond CISA	28 Apr 2025