ai.chronon:flink_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:online_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +4823 more potentially affected by CVE-2024-31141 via org.apache.kafka:kafka-clients (>=2.3.0, <=3.7.0)

org.apache.kafka:kafka-clients MAVEN version =2.3.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =cloud-0....

ai.h2o:h2o-persist-gcs (>=3.36.1.1, <=3.38.0.3), ai.h2o:sparkling-water-core_2.11 (>=3.36.1.1-1-2.2, <=3.38.0.3-1-2.4) +8589 more potentially affected by CVE-2020-8908 via com.google.guava:guava (31.0.1-jre)

com.google.guava:guava MAVEN version 31.0.1-jre is affected by a known vulnerability. The following packages have a transitive dependency on com.google.guava:guava and may be impacted: - ai.h2o:h2o-persist-gcs =3.36.1.1, =3.36.1.1-1-2.2, =3.36.1.1-1-3.0, =3.36.1.1-1-3.1, =3.36.1.1-1-2.2,...