Your original email was, I believe, to the user list. Can you send it to the private list? It’s better if we don’t talk about vulnerabilities in public until we have a solution.
As moderator of both lists, I have rejected your emails to users. I will moderate through all emails that you send to private. > On Aug 22, 2025, at 9:58 AM, Marcin Radlak <[email protected]> wrote: > > Hi, just to make sure I have used the correct email, I am also sending > another email > Best regards > Marcin Radlak > Chief Product Owner > [email protected] > www.datawalk.com > > >> On Fri, 22 Aug 2025 at 12:07, Marcin Radlak <[email protected]> >> wrote: >> >> Hi, >> I'm the co-head of the Datawalk Product Engineering team. We use Apache >> Drill heavily in our product while some of our developers also contribute >> back to the project. During our security tests we have discovered there are >> some critical vulnerabilities in the latest versions, which does block us >> from using drill in production. This is critical, since drill helps us in >> data imports from various places. >> >> Could you please review the security vulnerabilities we have discovered >> and assess when the fix will be possible? We need only CRITICAL >> vulnerabilities resolution ETA. All the others are not our focus at the >> moment. >> >> I tried to connect via slack but the link on the website does not work, so >> if you prefer to continue the communication on Slack, please invite me to >> the drill space. >> >> Best regards >> Marcin Radlak >> Chief Product Owner | Co-head of Product Engineering >> [email protected] >> www.datawalk.com >> >> DataWalk Spółka Akcyjna >> ul. Rzeźnicza 32-33, 50-130 Wrocław >> KRS: 0000405409, NIP: 894-303-43-18, REGON: 021737247 >> Sąd Rejonowy dla Wrocławia-Fabrycznej, VI Wydział Gospodarczy KRS >> Kapitał zakładowy: 513.298,80 zł w całości wpłacony >> _____________________________________________ >> Informacje o przetwarzaniu danych osobowych/Information on the processing >> of personal data: >> https://datawalk.com/pl/polityka-prywatnosci/ >>
