com.hubspot:singularitybase (>=0.3.3, <=0.3.5), com.hubspot:singularityclient (>=0.3.3, <=0.3.5) +1 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.18.0)

org.apache.mesos:mesos MAVEN version 0.18.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot:singularitybase =0.3.3, =0.3.3, =0.3.3, =0.3.5 Source cves: CVE-2018-11793 Source advisory:...

com.groupon.mesos:jesos (1.0), com.hubspot:embedsingularityexample (0.4.0) +12 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.20.1)

org.apache.mesos:mesos MAVEN version 0.20.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.groupon.mesos:jesos 1.0 - com.hubspot:embedsingularityexample 0.4.0 - com.hubspot:singularitybase =0.3.9,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +906 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.21.1)

org.apache.mesos:mesos MAVEN version 0.21.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - ae.teletronics.nlp:entityextraction 1.3 - ae.teletronics.nlp:w2vec 1.0 - ai.grakn:client-java 1.3.0 -...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +35 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (>=1.0.0, <=1.4.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =0.0.3, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: CVE-2018-11793 Source advisory: GHSA-P2XQ-VCM7-XJJ6...

org.apache.beam:beam-runners-twister2 (>=2.23.0, <=2.77.0), org.apache.ignite:ignite-mesos (>=2.7.0, <=2.12.0) +5 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (1.5.0)

org.apache.mesos:mesos MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework (0.1.0), com.hubspot.mesos.rx.java:mesos-rxjava-protobuf-client (0.1.0) +4 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (1.6.1)

org.apache.mesos:mesos MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework 0.1.0 -...

com.hubspot:singularitybase (>=0.3.0, <=0.3.2), com.hubspot:singularityclient (>=0.3.0, <=0.3.2) +2 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.17.0)

org.apache.mesos:mesos MAVEN version 0.17.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot:singularitybase =0.3.0, =0.3.0, =0.3.0, =0.3.2 - org.jenkins-ci.plugins:mesos 0.2.0 Source cves:...

com.dangdang:elastic-job-cloud-executor (>=2.0.0, <=2.0.2), com.dangdang:elastic-job-cloud-scheduler (>=2.0.0, <=2.0.2) +13 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.28.1)

org.apache.mesos:mesos MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.dangdang:elastic-job-cloud-executor =2.0.0, =2.0.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0,...

org.apache.beam:beam-runners-twister2 (>=2.23.0, <=2.77.0), org.apache.ignite:ignite-mesos (>=2.7.0, <=2.12.0) +5 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (1.5.0)

org.apache.mesos:mesos MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +35 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (>=1.0.0, <=1.4.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =0.0.3, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.4.1 and more Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework (0.1.0), com.hubspot.mesos.rx.java:mesos-rxjava-protobuf-client (0.1.0) +4 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (1.6.1)

org.apache.mesos:mesos MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework 0.1.0 -...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2018-11793 Source advisory: OSV:GHSA-P2XQ-VCM7-XJJ6...

org.apache.beam:beam-runners-twister2 (>=2.23.0, <=2.77.0), org.apache.ignite:ignite-mesos (>=2.7.0, <=2.12.0) +5 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (1.5.0)

org.apache.mesos:mesos MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +1110 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (>=0.9.0-incubating, <=1.4.2)

org.apache.mesos:mesos MAVEN version =0.9.0-incubating, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework (0.1.0), com.hubspot.mesos.rx.java:mesos-rxjava-protobuf-client (0.1.0) +4 more potentially affected by CVE-2018-11793 via org.apache.mesos:mesos (1.6.1)

org.apache.mesos:mesos MAVEN version 1.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot.mesos.rx.java.example:mesos-rxjava-example-framework 0.1.0 -...

CVE-2018-11793

Apache Mesos is affected in versions pre-1.4.x and specific 1.4.x/1.5.x/1.6.x/1.7.0 branches. The issue is an unbounded recursion during parsing of deeply nested JSON payloads, which can overflow the stack and cause a denial of service/crash of Mesos masters. The impact is DoS rendering the clust...