org.apache.hama:hama-mesos (>=0.7.0, <=0.7.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.15.0)

org.apache.mesos:mesos MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.hama:hama-mesos =0.7.0, =0.7.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

com.hubspot:blazarservice (>=0.2, <=0.3), com.hubspot:embedsingularityexample (>=0.4.5, <=0.6.2) +12 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.23.0)

org.apache.mesos:mesos MAVEN version 0.23.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.hubspot:blazarservice =0.2, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5, =0.4.5,...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +31 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (>=1.0.0, <=1.1.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.0.1, =1.2.3, =1.2.18 and more Source cves: CVE-2017-7687 Source advisory: OSV:GHSA-X869-784M-JMJ2...

cn.fossc.com.dangdang:elastic-job-cloud-executor (>=2.1.7, <=2.2.1), cn.fossc.com.dangdang:elastic-job-cloud-scheduler (>=2.1.7, <=2.2.1) +31 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (>=1.0.0, <=1.1.2)

org.apache.mesos:mesos MAVEN version =1.0.0, =2.1.7, =2.1.7, =2.2.0, =2.2.0, =2.1.2, =2.1.2, =0.18.0, =0.18.0, =0.18.0, =0.18.0, =0.1.0, =0.1.0, =0.3.0, =0.0.1, =1.2.3, =1.2.18 and more Source cves: CVE-2017-7687 Source advisory: GHSA-X869-784M-JMJ2...

Denial of service in Apache Mesos

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster...

com.adobe.api.platform.runtime:mesos (0.0.2), com.adobe.api.platform.runtime:mesos-actor (>=0.0.3, <=0.0.9) potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (1.2.1)

org.apache.mesos:mesos MAVEN version 1.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.adobe.api.platform.runtime:mesos 0.0.2 - com.adobe.api.platform.runtime:mesos-actor =0.0.3, =0.0.9 Source cves:...

GHSA-X869-784M-JMJ2 Denial of service in Apache Mesos

When handling a decoding failure for a malformed URL path of an HTTP request, libprocess in Apache Mesos might crash because the code accidentally calls inappropriate function. A malicious actor can therefore cause a denial of service of Mesos masters rendering the Mesos-controlled cluster...

com.dangdang:elastic-job-cloud-executor (>=2.0.0, <=2.0.2), com.dangdang:elastic-job-cloud-scheduler (>=2.0.0, <=2.0.2) +13 more potentially affected by CVE-2017-7687 via org.apache.mesos:mesos (0.28.1)

org.apache.mesos:mesos MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.dangdang:elastic-job-cloud-executor =2.0.0, =2.0.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0,...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2017-2612 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2017-2607 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

com.xti.jenkins.plugins:aws-lambda-jenkins-plugin (0.0.1), org.jenkins-ci.main:jenkins-test-harness (1.599) +7 more potentially affected by CVE-2019-1003004 via org.jenkins-ci.main:jenkins-core (1.599)

org.jenkins-ci.main:jenkins-core MAVEN version 1.599 is affected by a known vulnerability. The following packages have a transitive dependency on org.jenkins-ci.main:jenkins-core and may be impacted: - com.xti.jenkins.plugins:aws-lambda-jenkins-plugin 0.0.1 -...

org.apache.hama:hama-mesos (>=0.7.0, <=0.7.1) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.15.0)

org.apache.mesos:mesos MAVEN version 0.15.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.hama:hama-mesos =0.7.0, =0.7.1 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (0.5.0) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.20.0)

org.apache.mesos:mesos MAVEN version 0.20.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos 0.5.0 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

com.groupon.mesos:jesos (1.4), org.apache.ignite:ignite-mesos (>=1.2.0-incubating, <=2.6.0) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.22.0)

org.apache.mesos:mesos MAVEN version 0.22.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.groupon.mesos:jesos 1.4 - org.apache.ignite:ignite-mesos =1.2.0-incubating, =2.6.0 Source cves: CVE-2019-0204...

org.jenkins-ci.plugins:mesos (>=0.8.0, <=0.10.1) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.22.1)

org.apache.mesos:mesos MAVEN version 0.22.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.8.0, =0.10.1 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

org.jenkins-ci.plugins:mesos (>=0.11.0, <=0.13.1) potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.27.0)

org.apache.mesos:mesos MAVEN version 0.27.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.jenkins-ci.plugins:mesos =0.11.0, =0.13.1 Source cves: CVE-2019-0204 Source advisory: OSV:GHSA-32W9-2QPC-5F9V...

com.dangdang:elastic-job-cloud-executor (>=2.0.0, <=2.0.2), com.dangdang:elastic-job-cloud-scheduler (>=2.0.0, <=2.0.2) +13 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.28.1)

org.apache.mesos:mesos MAVEN version 0.28.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - com.dangdang:elastic-job-cloud-executor =2.0.0, =2.0.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0, =0.7.0,...

org.apache.beam:beam-runners-twister2 (>=2.23.0, <=2.77.0), org.apache.ignite:ignite-mesos (>=2.7.0, <=2.12.0) +5 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (1.5.0)

org.apache.mesos:mesos MAVEN version 1.5.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.apache.beam:beam-runners-twister2 =2.23.0, =2.7.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.3.0, =0.8.0 Source cves:...

org.spark-project:spark-bagel_2.9.2 (>=0.5.1, <=0.5.2), org.spark-project:spark-core_2.9.2 (>=0.5.1, <=0.5.2) +2 more potentially affected by CVE-2019-0204 via org.apache.mesos:mesos (0.9.0-incubating)

org.apache.mesos:mesos MAVEN version 0.9.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.spark-project:spark-bagel2.9.2 =0.5.1, =0.5.1, =0.5.1, =0.5.1, =0.5.2 Source cves: CVE-2019-0204...