CVE-2025-9571 Arbitrary Code Execution in Google Cloud Data Fusion via Malicious Artifact Upload

A remote code execution RCE vulnerability exists in Google Cloud Data Fusion. A user with permissions to upload artifacts to a Data Fusion instance can execute arbitrary code within the core AppFabric component. This could allow the attacker to gain control over the Data Fusion instance,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2023-26048 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

cdap.csu.edu.au Cross Site Scripting vulnerability OBB-2874192

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-43797 via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-37137 via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-21409 via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2021-21290 +1 more via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +73 more potentially affected by CVE-2020-27216 via org.eclipse.jetty:jetty-webapp (8.1.15.v20140411)

org.eclipse.jetty:jetty-webapp MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-webapp and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

co.cask.cdap:cdap-api-spark (>=3.4.0, <=5.1.2), co.cask.cdap:cdap-api-spark2_2.11 (>=4.2.0, <=5.1.2) +250 more potentially affected by CVE-2019-20444 via org.jboss.netty:netty (3.2.7.final)

org.jboss.netty:netty MAVEN version 3.2.7.final is affected by a known vulnerability. The following packages have a transitive dependency on org.jboss.netty:netty and may be impacted: - co.cask.cdap:cdap-api-spark =3.4.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0, =3.4.0, =4.2.0, =3.5.0, =4.2.0,...

io.cdap.cdap:cdap-event-writer-ext-gcp-pubsub (1.4.0), io.cdap.cdap:cdap-event-writer-extensions (1.4.0) +5 more potentially affected by CVE-2019-10782 via com.puppycrawl.tools:checkstyle (6.11.2)

com.puppycrawl.tools:checkstyle MAVEN version 6.11.2 is affected by a known vulnerability. The following packages have a transitive dependency on com.puppycrawl.tools:checkstyle and may be impacted: - io.cdap.cdap:cdap-event-writer-ext-gcp-pubsub 1.4.0 - io.cdap.cdap:cdap-event-writer-extensions...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2015-2080 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-9735 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...

co.cask.cdap:cdap-client-tests (3.0.0), co.cask.cdap:sparkkmeans (>=2.6.3, <=3.0.6) +274 more potentially affected by CVE-2017-7657 via org.eclipse.jetty:jetty-server (8.1.15.v20140411)

org.eclipse.jetty:jetty-server MAVEN version 8.1.15.v20140411 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - co.cask.cdap:cdap-client-tests 3.0.0 - co.cask.cdap:sparkkmeans =2.6.3, =2.6.3, =0.2.0,...