PatchTheCVElinkis vulnerabilities and fixes
Recent CVEs affecting linkis, with upgrade or downgrade steps. 4 tracked.
linkis has 4 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 4. Most recent: 2026-01-19. Highest priority: CVE-2025-29847 (score 51/100).
- CVE-2025-59355 MEDIUM 6.5 UPGRADE A vulnerability. When org.apache.linkis.metadata.util.HiveUtils.decode() fails to perform Base64 decoding, it
- CVE-2025-29847 HIGH 7.5 UPGRADE A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC e
- CVE-2024-45627 MEDIUM 5.9 UPGRADE In Apache Linkis <1.7.0, due to the lack of effective filtering of parameters, an attacker configuring malicio
- CVE-2024-39928 HIGH 7.5 UPGRADE In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated
FAQ
How do I fix linkis vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is linkis being exploited right now?
None of the tracked linkis CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which linkis CVE should I patch first?
CVE-2025-29847 currently ranks highest (51/100): A vulnerability in Apache Linkis. Problem Description When using the JDBC engine and da When using the JDBC e.