Apache Doris

Security Notices
Apache Doris Updates Address Authentication Bypass and JDBC Code Execution

Apache Doris has separate metadata-authentication and privileged JDBC code-execution flaws. Restrict FE interfaces and driver-management permissions, then choose an upgrade covering both; the 4.0.8 metadata fix alone does not establish JDBC protection.

Read this guide