In streampark, there is a project module that integrates Maven's compilation capability.
Full advisory text at GitHub advisory or NVD.
maven package report
Is org.apache.streampark:streampark safe?
org.apache.streampark:streampark (maven) has 12 known vulnerabilities, the worst rated CRITICAL. No single fixed version is recorded that clears every advisory, so check each one below. No malicious-package signal is recorded.
// reach
0 direct dependencies
none carry a known advisory
0 packages depend on it
dependents not yet indexed for this ecosystem
Create a free accountfor every dependency path, dependent and what to upgrade
// ai model usage
Tracked for PyPI packages. HuggingFace models declare Python dependencies, so maven packages are not covered.
cvss
9.0
critical
severity band, no base score published
epss
2.3%
medium
chance of exploitation in 30 days, 84th percentile of all CVEs
xyz score
4.0
medium
CyberXYZ composite out of 10
fig. 01 — GHSA-qg44-xqwj-wc28, the advisory selected below
// 12 advisories
Is org.apache.streampark:streampark safe to install?
CyberXYZ does not call a package safe in absolute terms. It records 12 known vulnerabilities for org.apache.streampark:streampark (maven), the worst rated CRITICAL, and no malicious-package signal. Whether it is acceptable depends on the version you run.
Does org.apache.streampark:streampark have known vulnerabilities?
Yes. CyberXYZ records 12 known vulnerabilities for org.apache.streampark:streampark (maven), the worst rated CRITICAL. These include GHSA-qg44-xqwj-wc28, GHSA-m5h8-2pjw-vg3j, GHSA-3hg2-rh4r-8qf6, GHSA-prv5-c2px-j9q3, GHSA-749j-2hp6-8cxm.
How do I check org.apache.streampark:streampark before installing?
Search org.apache.streampark:streampark in CyberXYZ Check at https://cyberxyz.io/check?q=org.apache.streampark%3Astreampark. The xyz Scanner checks a project's dependencies, and CyberXYZ Proxy checks each package as it is installed.
Checked 2026-11-14 at 10:26 UTC. The most recent advisory here was published 2025-12-12. Updated continuously from NVD, GHSA, OSV and CNA feeds.