CVE-2025-54981: Apache StreamPark uses a Weak Encryption Algorithm

December 12, 2025

Weak Encryption Algorithm in StreamPark, The use of an AES cipher in ECB mode and a weak random number generator for encrypting sensitive data, including JWT tokens, may have risked exposing sensitive authentication data

This issue affects Apache StreamPark: from 2.0.0 before 2.1.7.

Users are recommended to upgrade to version 2.1.7, which fixes the issue.

References

github.com/advisories/GHSA-749j-2hp6-8cxm
github.com/apache/streampark
github.com/apache/streampark/commit/39034db0c806168afa82e58e4f376e1e3c3b73e4
lists.apache.org/thread/9rbvdvwg5fdhzjdgyrholgso53r26998
nvd.nist.gov/vuln/detail/CVE-2025-54981

Code Behaviors & Features

Detect and mitigate CVE-2025-54981 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →