fr.jetoile.hadoop:hadoop-unit-client-alluxio (>=2.2, <=2.9), io.minio:spark-benchmarks-dfsio_2.11 (0.2.0) +13 more potentially affected by CVE-2022-23848 via org.alluxio:alluxio-core-common (1.4.0)

org.alluxio:alluxio-core-common MAVEN version 1.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.alluxio:alluxio-core-common and may be impacted: - fr.jetoile.hadoop:hadoop-unit-client-alluxio =2.2, =2.9 - io.minio:spark-benchmarks-dfsio2.11 0.2...