Apache Gobblin
By the Year
In 2024 there have been 0 vulnerabilities in Apache Gobblin . Gobblin did not have any published security vulnerabilities last year.
| Year | Vulnerabilities | Average Score |
|---|---|---|
| 2024 | 0 | 0.00 |
| 2023 | 0 | 0.00 |
| 2022 | 2 | 7.65 |
| 2021 | 0 | 0.00 |
| 2020 | 0 | 0.00 |
| 2019 | 0 | 0.00 |
| 2018 | 0 | 0.00 |
It may take a day or so for new Gobblin vulnerabilities to show up in the stats or in the list of recent security vulnerabilties. Additionally vulnerabilities may be tagged under a different product or component name.
Recent Apache Gobblin Security Vulnerabilities
Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service
CVE-2021-36152
9.8 - Critical
- February 04, 2022
Apache Gobblin trusts all certificates used for LDAP connections in Gobblin-as-a-Service. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.
In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems
CVE-2021-36151
5.5 - Medium
- February 04, 2022
In Apache Gobblin, the Hadoop token is written to a temp file that is visible to all local users on Unix-like systems. This affects versions <= 0.15.0. Users should update to version 0.16.0 which addresses this issue.
Information Disclosure
Stay on top of Security Vulnerabilities
Want an email whenever new vulnerabilities are published for Apache Gobblin or by Apache? Click the Watch button to subscribe.
