List of CVE in Crate DB

[pooja1pathak]

I have been checking the NVD and mitre for vulnerability in cratedb. I have not found any.

I have checked the github issues and also community for the same but only one vulnerability was reported which was related to log4j.

I would like to know if there is any other link where I can find the vulnerability in cratedb or where vulnerabilities are reported.

[pooja1pathak]

@mfussenegger Please let me know if there is any other link for vulnerability in cratedb.

[ckurze]

Hi @pooja1pathak,

Thank you very much for this important question.

Please have a look at the bug fixes in our github repositories. If you find potential security issues, please report them directly to security@crate.io.

Thank you,
Christian

[ckurze]

Hi @pooja1pathak,

we also enabled the Private Security Vulnerability Reporting for the crate repository.

https://github.com/crate/crate/security/advisories