ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1229 more potentially affected by CVE-2026-24281 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.5)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =1.0.2-slim, =1.0.2-slim, =4.9.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-24281 Source advisory: GHSA-7XRH-HQFC-G7QR...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1229 more potentially affected by CVE-2026-24308 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.5)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =1.0.2-slim, =1.0.2-slim, =4.9.0, =0.1.0, =0.1.1 and more Source cves: CVE-2026-24308 Source advisory: MEND:CVE-2026-24308...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +1594 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (0.21)

io.airlift:aircompressor MAVEN version 0.21 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - ai.catboost:catboost-spark3.22.12 =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =chaining-0.0.46-dev,...

ai.catboost:catboost-spark_3.5_2.12 (>=1.2.3, <=1.2.10), ai.catboost:catboost-spark_3.5_2.13 (>=1.2.3, <=1.2.10) +655 more potentially affected by CVE-2025-67721 via io.airlift:aircompressor (0.25)

io.airlift:aircompressor MAVEN version 0.25 is affected by a known vulnerability. The following packages have a transitive dependency on io.airlift:aircompressor and may be impacted: - ai.catboost:catboost-spark3.52.12 =1.2.3, =1.2.3, =3.44.0.1-1-3.5, =0.18.5, =0.1.0, =0.1.0, =7.0.0, =7.0.0,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +12695 more potentially affected by CVE-2024-6763 via org.eclipse.jetty:jetty-server (>=7.0.0.v20091005, <=9.4.56.v20240826)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.v20091005, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +650 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.7.3)

org.apache.hadoop:hadoop-common MAVEN version 2.7.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5386 more potentially affected by CVE-2024-29131 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5386 more potentially affected by CVE-2024-29133 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +5386 more potentially affected by CVE-2024-29131 via org.apache.commons:commons-configuration2 (>=2.0, <=2.10.0)

org.apache.commons:commons-configuration2 MAVEN version =2.0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_3.3_2.12 (>=1.1, <=1.2.10), ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1, <=1.2.10) +18907 more potentially affected by CVE-2024-26308 via org.apache.commons:commons-compress (>=1.21, <=1.25.0)

org.apache.commons:commons-compress MAVEN version =1.21, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.3.5, =0.3.3, =0.3.3, =0.1.12, =0.1.2, =0.18.0, =0.26.0 and more Source cves: CVE-2024-26308 Source advisory: MEND:CVE-2024-26308...

ae.teletronics.nlp:entityextraction (1.3), ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3) +14072 more potentially affected by CVE-2023-44981 via org.apache.zookeeper:zookeeper (>=3.3.0, <=3.7.1)

org.apache.zookeeper:zookeeper MAVEN version =3.3.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.10 and more Source cves: CVE-2023-44981 Source advisory: MEND:CVE-2023-44981...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +11841 more potentially affected by CVE-2023-40167 via org.eclipse.jetty:jetty-http (>=9.0.0.v20130308, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-http MAVEN version =9.0.0.v20130308, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.13.0, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +9843 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (>=9.0.0.m0, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-server MAVEN version =9.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +9843 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (>=9.0.0.m0, <=9.4.50.v20221201)

org.eclipse.jetty:jetty-server MAVEN version =9.0.0.m0, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.catboost:catboost-spark_3.0_2.12 (>=0.25, <=1.1.1), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +13754 more potentially affected by CVE-2022-42889 via org.apache.commons:commons-text (>=1.5, <=1.9)

org.apache.commons:commons-text MAVEN version =1.5, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +5726 more potentially affected by CVE-2016-5725 via com.jcraft:jsch (>=0.1.23, <=0.1.53)

com.jcraft:jsch MAVEN version =0.1.23, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.20.0.2, =3.20.0.2, =3.8.3.3, =2.0.18, =2.0.18, =2.0.18, =2.0.18, =1.0.0.9, =0.0.9, =0.1.10 and more Source cves: CVE-2016-5725 Source advisory: GHSA-Q446-82VQ-W674...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +5726 more potentially affected by CVE-2016-5725 via com.jcraft:jsch (>=0.1.23, <=0.1.53)

com.jcraft:jsch MAVEN version =0.1.23, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.20.0.2, =3.20.0.2, =3.8.3.3, =2.0.18, =2.0.18, =2.0.18, =2.0.18, =1.0.0.9, =0.0.9, =0.1.10 and more Source cves: CVE-2016-5725 Source advisory: OSV:GHSA-Q446-82VQ-W674...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23032 more potentially affected by CVE-2020-36180 via com.fasterxml.jackson.core:jackson-databind (>=2.0.0, <=2.6.7.4)

com.fasterxml.jackson.core:jackson-databind MAVEN version =2.0.0, =0.1, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =13publish-0.0.12 and more Source cves:...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-37137 via io.netty:netty (3.6.2.final)

io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.grakn:grakn-dist (>=0.10.0, <=0.15.0) +1892 more potentially affected by CVE-2021-37137 via io.netty:netty (3.10.5.final)

io.netty:netty MAVEN version 3.10.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark3.12.12 =1.0.1, =0.10.0, =0.10.0, =0.10.0, =0.15.0 - ai.grakn:migration-base 0.10.0 -...