https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-10-14T10:28:29.555330+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-18428 fkie_cve-2026-18428 2026-10-14T10:28:29.575061+00:00

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.

 https://db.gcve.eu/vuln/ghsa-3rvx-fcj6-wr45 GHSA-3rvx-fcj6-wr45 2026-10-14T10:28:29.575125+00:00

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint.