Apache Software Foundation Apache Flink

• CVE-2020-17519 Critical 9.1 Exploited Apache Flink directory traversal attack: reading remote files through the REST API 98.0%
• CVE-2026-35194 High 8.1 Apache Flink: Remote code execution via SQL injection in code generation 0.4%
• CVE-2020-17518 Unrated Apache Flink directory traversal attack: remote file writing through the REST API 49.1%