<?xml version="1.0" encoding="UTF-8"?>
<?xml-stylesheet type="text/xsl" href="rss.xsl"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
  <channel>
    <title>Dremio Corporation — recent CVEs</title>
    <link>https://vulnogram.org/</link>
    <atom:link href="https://vulnogram.org/rss/dremio" rel="self" type="application/rss+xml"/>
    <description>Most recent CVEs assigned by Dremio Corporation (dremio).</description>
    <image>
      <url>https://vulnogram.org/seaview/icons/dremio.png</url>
      <title>Dremio Corporation — recent CVEs</title>
      <link>https://vulnogram.org/</link>
    </image>
    <lastBuildDate>Wed, 21 Oct 2026 07:00:07 GMT</lastBuildDate>
    <item>
      <title>CVE-2025-2298 · 8.4 HIGH — Authenticated API Endpoint Allows Arbitrary File Deletion in Dremio Software</title>
      <link>https://vulnogram.org/CVE-2025-2298</link>
      <guid isPermaLink="true">https://vulnogram.org/CVE-2025-2298</guid>
      <description>An improper authorization vulnerability in Dremio Software allows authenticated users to delete arbitrary files that the system has access to, including system files and files stored in remote locations such as S3, Azure Blob Storage, and local files…</description>
      <category>High</category>
      <pubDate>Mon, 21 Apr 2025 15:12:24 GMT</pubDate>
    </item>
  </channel>
</rss>
