ai.catboost:catboost-spark_3.0_2.12 (>=0.25, <=1.2.8), ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8) +12325 more potentially affected by CVE-2026-106451 via org.lz4:lz4-java (>=1.7.0, <=1.8.1)

org.lz4:lz4-java MAVEN version =1.7.0, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =0.0.115 and more Source cves: CVE-2026-106451 Source advisory: GHSA-MCR4-QMVW-PX4G...