Flink Stateful Functions
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:flink_stateful_functions:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Flink Stateful Functions (161decd6-2178-5d73-8658-2a2cd08c131c) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/flink-statefun |
purl2cpe | 2026-06-01 10:14:26.162047 |
pkg:docker/apache/flink-statefun |
purl2cpe | 2026-06-01 10:14:26.162050 |
pkg:github/apache/flink-statefun |
purl2cpe | 2026-06-01 10:14:26.162053 |
pkg:maven/org.apache.flink/statefun-flink |
purl2cpe | 2026-06-01 10:14:26.162056 |
pkg:npm/apache-flink-statefun |
purl2cpe | 2026-06-01 10:14:26.162059 |
pkg:pypi/apache-flink-statefun |
purl2cpe | 2026-06-01 10:14:26.162061 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-41834 |
vulnerable | 2026-06-08 06:11:07.137841 |
Apache Flink Stateful Functions allowed HTTP header injection due to Improper Neutralization of CRLF Sequences
Improper Neutralization of CRLF Sequences in HTTP Headers in Apache Flink Stateful Functions 3.1.0, 3.1.1 and 3.2.0 allows remote attackers to inject arbitrary HTTP headers and conduct HTTP response splitting attacks via crafted HTTP requests. Attackers could potentially inject malicious content into the HTTP response that is sent to the user's browser.
Users should upgrade to Apache Flink Stateful Functions version 3.3.0.
Published: 2023-09-19T12:34:16.970Z
Updated: 2025-02-13T17:09:03.658Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.