Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2021-42010

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-95w5-q9vp-5vrm

Heron allows CRLF log injection Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.

gitlab/maven/org.apache.heron/heron-api/CVE-2021-42010

Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.