Apache Software Foundation Apache Calcite

• CVE-2026-46718 Medium 6.5 Apache Calcite: A user-controled model can load arbitrary classes, leading to code execution 0.4%
• CVE-2022-39135 Unrated Apache Calcite: potential XEE attacks 2.2%