ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +2245 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (>=3.0.0-alpha1, <=3.3.6)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0-alpha1, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +2456 more potentially affected by CVE-2024-25638 via dnsjava:dnsjava (2.1.7)

dnsjava:dnsjava MAVEN version 2.1.7 is affected by a known vulnerability. The following packages have a transitive dependency on dnsjava:dnsjava and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev,...

africa.absa:inception-api (>=1.0.0, <=1.2.0), africa.absa:inception-codes-api (>=1.0.0, <=1.0.1) +6825 more potentially affected by CVE-2021-47621 via io.github.classgraph:classgraph (>=4.0.3, <=4.8.110)

io.github.classgraph:classgraph MAVEN version =4.0.3, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =1.0.0, =0.25, =0.25, =0.25, =0.25, =1.2.8 and more Source cves: CVE-2021-47621 Source advisory: MEND:CVE-2021-47621...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5399 more potentially affected by CVE-2024-29133 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5399 more potentially affected by CVE-2024-29133 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.3_2.12 (>=1.1, <=1.2.10), ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1, <=1.2.10) +18918 more potentially affected by CVE-2024-26308 via org.apache.commons:commons-compress (>=1.21, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.21, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =0.3.3, =0.3.3, =0.1.12, =0.1.2, =0.18.0, =0.26.0 and more Source cves: CVE-2024-26308 Source advisory: OSV:GHSA-4265-CCF5-PHJ5...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +7260 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (>=9.0.0.m0, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-xml MAVEN version =9.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =1.4.1 and more Source cves: unknown CVE...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +18611 more potentially affected by CVE-2023-34455 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.0)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2 - ai.catboost:catboost-spark3.42.12 1.2 - ai.catboost:catboost-spark3.42.13 1.2 and more Source cves: CVE-2023-34455 Source advisory:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +18611 more potentially affected by CVE-2023-34454 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.0)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2 - ai.catboost:catboost-spark3.42.12 1.2 - ai.catboost:catboost-spark3.42.13 1.2 and more Source cves: CVE-2023-34454 Source advisory:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +18611 more potentially affected by CVE-2023-34454 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.0)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2 - ai.catboost:catboost-spark3.42.12 1.2 - ai.catboost:catboost-spark3.42.13 1.2 and more Source cves: CVE-2023-34454 Source advisory:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +18611 more potentially affected by CVE-2023-34453 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.0)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2 - ai.catboost:catboost-spark3.42.12 1.2 - ai.catboost:catboost-spark3.42.13 1.2 and more Source cves: CVE-2023-34453 Source advisory:...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +18611 more potentially affected by CVE-2023-34453 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.0)

org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2 - ai.catboost:catboost-spark3.42.12 1.2 - ai.catboost:catboost-spark3.42.13 1.2 and more Source cves: CVE-2023-34453 Source advisory:...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +12065 more potentially affected by CVE-2023-26049 via org.eclipse.jetty:jetty-server (>=7.0.0.m0, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +12065 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (>=7.0.0.m0, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +9243 more potentially affected by CVE-2022-45693 via org.codehaus.jettison:jettison (>=1.0-rc1, <=1.5.1)

org.codehaus.jettison:jettison MAVEN version =1.0-rc1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.10 and more Source cves: CVE-2022-45693 Source advisory: MEND:CVE-2022-45693...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +9243 more potentially affected by CVE-2022-45685 via org.codehaus.jettison:jettison (>=1.0-rc1, <=1.5.1)

org.codehaus.jettison:jettison MAVEN version =1.0-rc1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.10 and more Source cves: CVE-2022-45685 Source advisory: MEND:CVE-2022-45685...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +11637 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=3.0, <=3.8.0)

commons-net:commons-net MAVEN version =3.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =1.2.10 and more Source cves: CVE-2021-37533 Source advisory: GHSA-CGP8-4M63-FHH5...

acegisecurity:acegi-security (>=0.8.2, <=0.9.0), acegisecurity:acegi-security-cas (0.9.0) +13882 more potentially affected by CVE-2021-37533 via commons-net:commons-net (>=1.0.0, <=3.8.0)

commons-net:commons-net MAVEN version =1.0.0, =0.8.2, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =1.2.7 and more Source cves: CVE-2021-37533 Source advisory: MEND:CVE-2021-37533...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +4277 more potentially affected by CVE-2022-37865 via org.apache.ivy:ivy (>=2.4.0, <=2.5.0)

org.apache.ivy:ivy MAVEN version =2.4.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2022-37865 Source advisory:...

ai.aitia:arrowhead-application-library-java-spring (>=4.4.0.2, <=4.6.0.0), ai.apiverse:apipulse (>='1.0.3', <=1.0.20) +25976 more potentially affected by CVE-2022-42004 via com.fasterxml.jackson.core:jackson-databind (>=2.13.0, <=2.13.3)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.13.0, =4.4.0.2, ='1.0.3', =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.0.6, =1.1, =1.1.1, =0.19.0, =0.32.0 and more Source cves: CVE-2022-42004 Source advisory: OSV:GHSA-RGV9-Q543-RQG4...