tag

Apache-Druid

Apache Druid Kerberos Cookie-Signing Secret Recovery via ThreadLocalRandom Seed Inversion (CVE-2025-59390)

CVE-2025-59390· Apache Druid — Kerberos authenticator (druid.auth.authenticator.kerberos) patched