CVE-2025-67721 vulnerabilities

Vulnerabilities for packages: apache-pulsar-fips, spark-fips, geoserver, pinot-fips, druid, trino, pinot, apache-pulsar, spark, apache-nifi...

CVE-2025-67721

creationtimestamp| type| source ---|---|--- 2025-12-13 03:15:49+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m7tn7qf5hb22...

ai.catboost:catboost-spark_4.0_2.13 (=1.2.10), ai.catboost:catboost-spark_4.1_2.13 (=1.2.10) +541 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (=2.0.2)

io.airlift:aircompressor MAVEN version =2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - ai.catboost:catboost-spark4.02.13 =1.2.10 - ai.catboost:catboost-spark4.12.13 =1.2.10 - ai.h2o:h2o-orc-parser...

io.github.jordepic:dataharness-trino (>=1.0 <=2.0), io.trino.gateway:gateway-ha (>=14 <=16) +19 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor-v3 (>=3.0 <=3.3)

io.airlift:aircompressor-v3 MAVEN version =3.0, =1.0, =14, =466, =457, =464, =457, =457, =457, =457, =457, =457, =457, =457, =469, =472, =475 and more Source cves: CVE-2025-67721 Source advisory: SNYK:JAVA-IOAIRLIFT-14412704...

ai.catboost:catboost-spark_2.3_2.11 (>=0.25 <=1.2.7), ai.catboost:catboost-spark_4.0_2.13 (=1.2.10) +1006 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (>=0.3 <=2.0.2)

io.airlift:aircompressor MAVEN version =0.3, =0.25, =3.10.0.5, =3.34.0.3-1-2.3, =2.3.0, =2.3.0, =0.0.3, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.0.0, =9.7.1 and more Source cves: CVE-2025-67721 Source advisory: OSV:GHSA-VX9Q-RHV9-3JVG...

EUVD-2025-67721

Malicious code in prospectivesparrowz3n npm...