#impala

0 stories this week · 0 this month · 7 in 6 months · mostly security

Stories per day · 30 days

3 stories, newest first · one card per story

oss-securityOct 7, 2026high

Apache Impala 4.5.2 path traversal can load attacker-controlled JARs outside trusted_jar_paths.

oss-securitySep 8, 2026high

Apache Impala CVE-2026-56207 allows forged SAML bearer tokens on the hs2-http interface, letting attackers impersonate other users; fixed in 4.5.2.

Apache Impala CVE-2026-54048 lets crafted Avro schema URLs trigger SSRF to internal endpoints, with responses potentially leaking via error messages.

Stories tagged #impala