EUVD-2022-7613

Malicious code in bioql PyPI...

org.apache.kylin:kylin-core-cube (1.5.0), org.apache.kylin:kylin-core-dictionary (1.5.0) +3 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (1.5.0)

org.apache.kylin:kylin-core-common MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-core-cube 1.5.0 - org.apache.kylin:kylin-core-dictionary 1.5.0 -...

org.apache.kylin:kylin-core-cube (1.5.2), org.apache.kylin:kylin-core-dictionary (1.5.2) +3 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (1.5.2)

org.apache.kylin:kylin-core-common MAVEN version 1.5.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-core-cube 1.5.2 - org.apache.kylin:kylin-core-dictionary 1.5.2 -...

org.apache.kylin:kylin-core-cube (2.5.1), org.apache.kylin:kylin-core-dictionary (2.5.1) +10 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.5.1)

org.apache.kylin:kylin-core-common MAVEN version 2.5.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-core-cube 2.5.1 - org.apache.kylin:kylin-core-dictionary 2.5.1 -...

org.apache.kylin:kylin-cache (2.6.1), org.apache.kylin:kylin-core-cube (2.6.1) +13 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.6.1)

org.apache.kylin:kylin-core-common MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-cache 2.6.1 - org.apache.kylin:kylin-core-cube 2.6.1 -...

org.apache.kylin:kylin-cache (3.0.0), org.apache.kylin:kylin-core-cube (3.0.0) +14 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (3.0.0)

org.apache.kylin:kylin-core-common MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-cache 3.0.0 - org.apache.kylin:kylin-core-cube 3.0.0 -...

org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=1.2.0), org.apache.ranger:ranger-kylin-plugin-shim (>=1.1.0, <=1.2.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.3.0)

org.apache.kylin:kylin-core-common MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.ranger:ranger-kylin-plugin =1.1.0, =1.1.0, =1.2.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-core-cube (2.5.0), org.apache.kylin:kylin-core-dictionary (2.5.0) +12 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.5.0)

org.apache.kylin:kylin-core-common MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-core-cube 2.5.0 - org.apache.kylin:kylin-core-dictionary 2.5.0 -...

org.apache.kylin:kylin-cache (2.6.3), org.apache.kylin:kylin-core-cube (2.6.3) +13 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.6.3)

org.apache.kylin:kylin-core-common MAVEN version 2.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-cache 2.6.3 - org.apache.kylin:kylin-core-cube 2.6.3 -...

org.apache.kylin:kylin-cache (2.6.4), org.apache.kylin:kylin-core-cube (2.6.4) +15 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.6.4)

org.apache.kylin:kylin-core-common MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-cache 2.6.4 - org.apache.kylin:kylin-core-cube 2.6.4 -...

org.apache.kylin:kylin-cache (3.0.0-alpha), org.apache.kylin:kylin-core-cube (3.0.0-alpha) +14 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (3.0.0-alpha)

org.apache.kylin:kylin-core-common MAVEN version 3.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-cache 3.0.0-alpha - org.apache.kylin:kylin-core-cube 3.0.0-alp...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (3.1.3)

org.apache.kylin:kylin-core-common MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0, =2.4.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-cache (4.0.0-alpha), org.apache.kylin:kylin-core-cube (4.0.0-alpha) +17 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (4.0.0-alpha)

org.apache.kylin:kylin-core-common MAVEN version 4.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.kylin:kylin-cache 4.0.0-alpha - org.apache.kylin:kylin-core-cube 4.0.0-alp...

org.apache.kylin:kylin-tool-assembly (3.0.0-alpha) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (3.0.0-alpha)

org.apache.kylin:kylin-server-base MAVEN version 3.0.0-alpha is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 3.0.0-alpha Source cves: CVE-2022-24697 Source...

org.apache.kylin:kylin-tool-assembly (2.6.5) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.6.5)

org.apache.kylin:kylin-server-base MAVEN version 2.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.5 Source cves: CVE-2022-24697 Source advisory:...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (3.1.3)

org.apache.kylin:kylin-server-base MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0, =2.4.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-tool-assembly (2.6.1) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.6.1)

org.apache.kylin:kylin-server-base MAVEN version 2.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.1 Source cves: CVE-2022-24697 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.5.0), org.apache.ranger:ranger-kylin-plugin (2.0.0) +1 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.5.0)

org.apache.kylin:kylin-server-base MAVEN version 2.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.5.0 - org.apache.ranger:ranger-kylin-plugin 2.0.0 -...

org.apache.kylin:kylin-tool-assembly (2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.4.0)

org.apache.kylin:kylin-server-base MAVEN version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.4.0 Source cves: CVE-2022-24697 Source advisory:...

org.apache.kylin:kylin-tool-assembly (2.4.1) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.4.1)

org.apache.kylin:kylin-server-base MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.4.1 Source cves: CVE-2022-24697 Source advisory:...