You are viewing a plain text version of this content. The canonical link for it is here.

Posted to announce@apache.org by roryqi <ro...@apache.org> on 2025/12/27 10:33:32 UTC

CVE-2025-68637: : Insecure SSL Configuration in Uniffle HTTP Client

Severity:

Affected versions:

- undefined  before 0.10.0

Description:

A vulnerability.

This issue affects undefined: from before 0.10.0.

Users are recommended to upgrade to version 0.10.0, which fixes the issue.

Credit:

omkar parkhe （finder）

References:

https://uniffle.apache.org
https://www.cve.org/CVERecord?id=CVE-2025-68637