Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hive/hive-service@3.1.1
purl pkg:maven/org.apache.hive/hive-service@3.1.1
Next non-vulnerable version 4.0.0
Latest non-vulnerable version 4.0.0
Risk score 3.9
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-77pm-w3hx-f8mj
Aliases:
CVE-2024-23945
Apache Hive and Spark: CookieSigner exposes the correct signature when message verification fails Signing cookies is an application security feature …
4.0.0
Not vulnerable
CVE-2021-34538

Missing Authentication for Critical Function Apache Hive before 3.1.3 "CREATE" and "DROP" function operations does not check for necessary authorization …
3.1.3
Vulnerable
This package is not known to fix any advisories.