CVE-2025-67721 vulnerabilities

Vulnerabilities for packages: spark, ranger, apache-pulsar-fips, hadoop-fips, apache-pulsar, geoserver, trino, pinot, pinot-fips, apache-nifi, spark-fips, druid...

io.github.jordepic:dataharness-trino (>=1.0, <=2.0), io.trino.gateway:gateway-ha (>=14, <=16) +19 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor-v3 (>=3.0, <=3.3)

io.airlift:aircompressor-v3 MAVEN version =3.0, =1.0, =14, =466, =457, =464, =457, =457, =457, =457, =457, =457, =457, =457, =469, =472, =475 and more Source cves: CVE-2025-67721 Source advisory: SNYK:JAVA-IOAIRLIFT-14412704...

com.facebook.presto:presto-benchmark (>=0.202, <=0.212), com.facebook.presto:presto-hive (>=0.202, <=0.212) +11 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (0.11)

io.airlift:aircompressor MAVEN version 0.11 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - com.facebook.presto:presto-benchmark =0.202, =0.202, =0.202, =0.202, =0.202, =0.202, =0.202, =0.202, =0.202,...

io.github.jordepic:dataharness-trino (>=1.0, <=2.0), io.trino.gateway:gateway-ha (>=14, <=16) +19 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor-v3 (>=3.0, <=3.3)

io.airlift:aircompressor-v3 MAVEN version =3.0, =1.0, =14, =466, =457, =464, =457, =457, =457, =457, =457, =457, =457, =457, =469, =472, =475 and more Source cves: CVE-2025-67721 Source advisory: GHSA-VX9Q-RHV9-3JVG...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +605 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (2.0.2)

io.airlift:aircompressor MAVEN version 2.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - ai.catboost:catboost-spark4.02.13 1.2.10 - ai.catboost:catboost-spark4.12.13 1.2.10 - ai.h2o:h2o-orc-parser...

com.amazon.emr:hive2-shims (>=5.0.0, <=5.6.0), com.expedia.apiary:apiary-metastore-listener (>=1.1.0, <=2.0.0) +54 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (0.3)

io.airlift:aircompressor MAVEN version 0.3 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - com.amazon.emr:hive2-shims =5.0.0, =1.1.0, =1.1.0, =3.0.0, =3.0.0, =1.1.3, =3.0.0, =1.1.3, =1.1.3, =3.0.0, =0.146...

com.facebook.presto:presto-hive (>=0.170, <=0.174), com.facebook.presto:presto-hive-cdh4 (>=0.170, <=0.174) +5 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (0.5)

io.airlift:aircompressor MAVEN version 0.5 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - com.facebook.presto:presto-hive =0.170, =0.170, =0.170, =0.170, =0.170, =0.170, =0.170, =0.174 Source cves:...

com.tencent.bk.base.datahub:iceberg-flink (>=0.12.1-bkbase.1, <=0.12.1-bkbase.3), com.tencent.bk.base.datahub:iceberg-mr (>=0.12.1-bkbase.1, <=0.12.1-bkbase.3) +121 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (0.19)

io.airlift:aircompressor MAVEN version 0.19 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - com.tencent.bk.base.datahub:iceberg-flink =0.12.1-bkbase.1, =0.12.1-bkbase.1, =0.12.1-bkbase.1, =0.12.1-bkbase.1...