Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive@3.0.0
purl pkg:maven/org.apache.hive/hive@3.0.0
Next non-vulnerable version 3.1.1
Latest non-vulnerable version 3.1.1
Risk 4.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-12xd-nb8g-23gc
Aliases:
CVE-2018-11777
GHSA-rrfq-g5fq-fc9c
3.1.1
Affected by 0 other vulnerabilities.
VCID-jq4c-tghp-s3c8
Aliases:
CVE-2018-1314
GHSA-jmf4-pq78-f8vj
Missing Authorization The Hive `EXPLAIN` operation does not check for necessary authorization of involved entities in a query. An unauthorized user can do `EXPLAIN` on arbitrary table or view and expose table metadata and statistics.
3.1.1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-05-30T20:54:29.724769+00:00 GitLab Importer Affected by VCID-12xd-nb8g-23gc https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hive/hive/CVE-2018-11777.yml 38.6.0
2026-05-30T20:54:29.661821+00:00 GitLab Importer Affected by VCID-jq4c-tghp-s3c8 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hive/hive/CVE-2018-1314.yml 38.6.0