CVE-2025-30001: Apache StreamPark contains an Incorrect Execution-Assigned Permissions vulnerability

October 10, 2025 (updated November 5, 2025)

Incorrect Execution-Assigned Permissions vulnerability in Apache StreamPark. This issue affects Apache StreamPark: from 2.1.4 before 2.1.6. Users are recommended to upgrade to version 2.1.6, which fixes the issue. Version 2.1.6 has yet to be published in the Maven registry.

References

github.com/advisories/GHSA-6wwv-6mm3-pp76
github.com/apache/streampark
lists.apache.org/thread/xfmsvhkcnr1831n0w5ovy3p44lsmfb7m
nvd.nist.gov/vuln/detail/CVE-2025-30001

Code Behaviors & Features

Detect and mitigate CVE-2025-30001 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →