CLEANSTART-2026-AS77854

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-AS77854.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-AS77854

Upstream

CVE-2021-37136

Published

2026-10-08T00:55:28Z

Modified

2026-10-08T16:47:03Z

Severity

7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator

Summary

Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression)

Details

Security vulnerability affects the apache-hive package. The Bzip2 decompression decoder function doesn't allow setting size restrictions on the decompressed output data (which affects the allocation size used during decompression).

References

Affected packages

CleanStart / apache-hive

Package

Name: apache-hive
Purl: pkg:apk/cleanstart/apache-hive

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

3.1.3-r3

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-AS77854.json"