Apache Software Foundation Apache Heron (Incubating) vulnerabilities

1 vulnerability

Known vulnerabilities in Apache Software Foundation Apache Heron (Incubating), newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

9.8CVE-2021-42010apache software foundationapache heron (incubating)+2
EPSS score
1.58%
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.