evo-druid-cve-patch
From the author
Patches Apache Druid 0.20.0 for CVE-2021-25646 - a JavaScript injection vulnerability where empty-string keys in JSON payloads can override server-side JavaScriptConfig to enable arbitrary code exe...
Install
npx skills add OpenLAIR/OpenSkill --skill evo-druid-cve-patch -a claude-code
Installs to .claude/skills/evo-druid-cve-patch/ · Each command fetches the skill straight from GitHub with the open skills CLI.
Byte-identical to the scanned commit, with the repository’s licence and a SOURCE.txt.
Want your agent to suggest skills while you type? See how to use skills from your IDE.
Safety checks on SKILL.md
- Ships scripts we have not reviewedLow
Why 75
aiqbench computes the trust score from public signals. It is not a security audit, so read a skill before you install it.
Similar skills
Closest to this one by what they do and when they are used.
- druid-js-vulnerabilitycxcscmu/SkillLearnBenchPatching Apache Druid JavaScript injection vulnerability (CVE-2021-25646). Use this skill when fixing Druid's JavaScript execution bypass where empty JSON keys override @JacksonInject JavaScriptConfig to enable JavaScript execution despite being disabled server-wide.Security★ 91
- run2_druid-cve-2021-25646cxcscmu/SkillLearnBenchComplete fix for Apache Druid CVE-2021-25646 JavaScript RCE via @JacksonInject override in all 7 affected components.Security★ 91
- druid-javascript-rcecxcscmu/SkillLearnBenchApache Druid JavaScript RCE vulnerability (CVE-2021-25646) fix via @JacksonInject hardening and constructor validation.Security★ 91
- druid-javascript-securitycxcscmu/SkillLearnBenchSecuring Apache Druid's JavaScript execution engine against code injection and security bypass attacks.Security★ 91
- apache-druid-securitycxcscmu/SkillLearnBenchSecurity patching for Apache Druid - covers JavaScript execution vulnerabilities, sampler endpoint protection, and filter validation patterns.Security★ 91
- jackson-druid-cvecxcscmu/SkillLearnBenchSecurity and Jackson deserialization issues in Apache Druid, focusing on property bypasses.Security★ 91
Ratings & reviews
—
no reviews
Tried this skill? Rate it to help others. Sign in
Discussion
Join the discussion. Sign in