Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2021-42010 1 Apache 1 Heron 2025-05-07 9.8 Critical
Heron versions <= 0.20.4-incubating allows CRLF log injection because of the lack of escaping in the log statements. Please update to version 0.20.5-incubating which addresses this issue.