com.alibaba.alink:alink_connector_jdbc_derby_flink-1.10_2.11 (>=1.3.0, <=1.6.2), com.alibaba.alink:alink_connector_jdbc_derby_flink-1.11_2.11 (>=1.3.0, <=1.6.2) +85 more potentially affected by CVE-2022-46337 via org.apache.derby:derby (>=10.6.1.0, <=10.6.2.1)

org.apache.derby:derby MAVEN version =10.6.1.0, =1.3.0, =1.3.0, =1.3.1, =1.4.0, =1.3.0, =1.1.2, =1.1.2, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.1.0, =1.2.0 and more Source cves: CVE-2022-46337 Sourc...

com.alibaba.alink:alink_connector_datahub_flink-1.10_2.11 (>=1.5.5, <=1.6.2), com.alibaba.alink:alink_connector_datahub_flink-1.11_2.11 (>=1.5.5, <=1.6.2) +89 more potentially affected by CVE-2023-1370 via net.minidev:json-smart (1.0.9-1)

net.minidev:json-smart MAVEN version 1.0.9-1 is affected by a known vulnerability. The following packages have a transitive dependency on net.minidev:json-smart and may be impacted: - com.alibaba.alink:alinkconnectordatahubflink-1.102.11 =1.5.5, =1.5.5, =1.5.5, =1.5.5, =1.5.5, =1.3.0, =1.3.0,...

com.alibaba.alink:alink_connector_datahub_flink-1.11_2.11 (>=1.5.5, <=1.6.2), com.alibaba.alink:alink_connector_kafka_flink-1.11_2.11 (>=1.4.0, <=1.6.2) +96 more potentially affected by CVE-2020-17519 via org.apache.flink:flink-runtime_2.11 (>=1.11.0, <=1.11.2)

org.apache.flink:flink-runtime2.11 MAVEN version =1.11.0, =1.5.5, =1.4.0, =1.6.2 - com.alibaba.alink:alinkconnectorshiveflink-1.102.11 1.2.0 - com.alibaba.alink:alinkconnectorshiveflink-1.112.11 1.2.0 - com.alibaba.alink:alinkconnectorshiveflink-1.92.11 1.2.0 -...