ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.24 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

ai.catboost:catboost-spark_4.0_2.13 (1.2.10), ai.catboost:catboost-spark_4.1_2.13 (1.2.10) +1359 more potentially affected by CVE-2026-59739 via org.apache.zookeeper:zookeeper (>=3.8.0, <=3.8.6)

org.apache.zookeeper:zookeeper MAVEN version =3.8.0, =3.10.0.5, =3.10.0.7, =1.0.2-slim, =1.0.2-slim, =4.9.0, =4.11.24 - ai.platon.pulsar:pulsar-protocol 4.9.3 - ai.platon.pulsar:pulsar-ql 4.9.3 - ai.platon.pulsar:pulsar-ql-tests 4.9.3 - ai.platon.pulsar:pulsar-skeleton 4.9.3 and more Source cves:...

Denial Of Service (DoS)

ai.h2o, h2o-core is vulnerable to Denial Of Service DoS. The vulnerability is due to the typeahead endpoint performing a HEAD request without setting a timeout, allowing an attacker to exploit this by making requests to an attacker-controlled server that hangs, causing the application to become...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.22.1.1, <=3.46.0.12) +4305 more potentially affected by CVE-2024-9823 via org.eclipse.jetty:jetty-servlets (>=9.0.0.v20130308, <=9.4.53.v20231009)

org.eclipse.jetty:jetty-servlets MAVEN version =9.0.0.v20130308, =3.30.0.7, =3.22.1.1, =3.38.0.1, =0.2.10, =2.1.56, =3.30.0.5-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =0.2.10, =2.1.56, =3.30.0.5-1-3.0, =2.1.56, =3.30.0.5-1-3.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc,...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.22.1.1, <=3.46.0.12) +4305 more potentially affected by CVE-2024-9823 via org.eclipse.jetty:jetty-servlets (>=9.0.0.v20130308, <=9.4.53.v20231009)

org.eclipse.jetty:jetty-servlets MAVEN version =9.0.0.v20130308, =3.30.0.7, =3.22.1.1, =3.38.0.1, =0.2.10, =2.1.56, =3.30.0.5-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =0.2.10, =2.1.56, =3.30.0.5-1-3.0, =2.1.56, =3.30.0.5-1-3.0, =0.1.3-20210127.1838-76ab4fc, =0.1.3-20210127.1838-76ab4fc,...

ai.h2o:h2o-algos (>=3.8.1.4, <=3.22.0.5), ai.h2o:h2o-app (>=3.8.1.4, <=3.22.0.5) +88 more potentially affected by unknown CVE via org.eclipse.jetty:jetty-xml (8.1.17.v20150415)

org.eclipse.jetty:jetty-xml MAVEN version 8.1.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-xml and may be impacted: - ai.h2o:h2o-algos =3.8.1.4, =3.8.1.4, =3.12.0.1, =3.8.2.4, =3.8.1.4, =3.14.0.7, =3.16.0.1,...

ai.h2o:h2o-app (>=3.22.1.1, <=3.30.0.6), ai.h2o:h2o-jetty-8 (>=3.22.1.1, <=3.30.0.6) +41 more potentially affected by CVE-2021-34428 via org.eclipse.jetty:jetty-server (8.1.21.v20160908)

org.eclipse.jetty:jetty-server MAVEN version 8.1.21.v20160908 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-app =3.22.1.1, =3.22.1.1, =2.1.47, =2.1.47, =2.1.47, =2.1.47, =0.1.2, =0.1.3 ...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21409 via io.netty:netty (3.6.2.final)

io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...

ai.h2o:h2o-persist-gcs (>=3.36.1.1, <=3.38.0.3), ai.h2o:sparkling-water-core_2.11 (>=3.36.1.1-1-2.2, <=3.38.0.3-1-2.4) +8589 more potentially affected by CVE-2020-8908 via com.google.guava:guava (31.0.1-jre)

com.google.guava:guava MAVEN version 31.0.1-jre is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.h2o:h2o-persist-gcs =3.36.1.1, =3.36.1.1-1-2.2, =3.36.1.1-1-3.0, =3.36.1.1-1-3.1, =3.36.1.1-1-2.2,...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4694 more potentially affected by CVE-2020-27223 via org.eclipse.jetty:jetty-server (>=9.4.6.v20170531, <=9.4.36.v20210114)

org.eclipse.jetty:jetty-server MAVEN version =9.4.6.v20170531, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...

ai.catboost:catboost-spark_2.11 (>=0.25-rc1, <=0.25-rc3), ai.catboost:catboost-spark_2.12 (>=0.25-rc1, <=0.25-rc3) +1700 more potentially affected by CVE-2021-21295 +1 more via io.netty:netty (3.6.2.final)

io.netty:netty MAVEN version 3.6.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.netty:netty and may be impacted: - ai.catboost:catboost-spark2.11 =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =3.14.0.1, =3.14.0.1, =3.20.0.2, =3.20.0.2,...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4358 more potentially affected by CVE-2020-27218 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.33.v20201020)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +4400 more potentially affected by CVE-2020-27218 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.34.v20201102)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =0.0.2, =0.1.0, =0.1.3-20210127.1838-76ab4fc -...

ai.h2o:h2o-algos (>=3.16.0.5, <=3.16.0.12), ai.h2o:h2o-app (>=3.16.0.5, <=3.16.0.12) +2322 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.2.0.v20140526, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =9.2.0.v20140526, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.12 and more Source cves: CVE-2019-10246 Source advisory:...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +2450 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.16.v20190411)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =2.0.3.release, =2.1.4.release, =2.0.2.release, =2.1.2.release -...

ai.h2o:h2o-algos (>=3.16.0.5, <=3.16.0.12), ai.h2o:h2o-app (>=3.16.0.5, <=3.16.0.12) +2322 more potentially affected by CVE-2019-10246 via org.eclipse.jetty:jetty-server (>=9.2.0.v20140526, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =9.2.0.v20140526, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.12 and more Source cves: CVE-2019-10246 Source advisory:...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +2440 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.15.v20190215)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =2.0.3.release, =2.1.4.release, =2.0.2.release, =2.1.2.release -...

ai.h2o:h2o-app (>=3.30.0.7, <=3.46.0.12), ai.h2o:h2o-jetty-9 (>=3.30.0.7, <=3.46.0.12) +2440 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.15.v20190215)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.34.0.3-1-2.2, =3.34.0.3-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =3.30.0.7-1-2.1, =3.30.0.7-1-3.0, =2.0.3.release, =2.1.4.release, =2.0.2.release, =2.1.2.release -...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.22.0.5) +153 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.1.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 8.1.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-algos =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1...

ai.h2o:h2o-algos (>=3.16.0.5, <=3.16.0.12), ai.h2o:h2o-app (>=3.16.0.5, <=3.16.0.12) +2787 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (>=9.0.0.m0, <=9.2.26.v20180806)

org.eclipse.jetty:jetty-server MAVEN version =9.0.0.m0, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.5, =3.16.0.12 and more Source cves: CVE-2019-10241 Source advisory:...