ai.chronon:flink_2.12 (>=0.0.62 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91), cn.guruguru:datalink (>=0.0.1 <=0.0.2) +1604 more potentially affected by CVE-2020-1960 via org.apache.flink:flink-core (>=0.6-hadoop2-incubating <=1.9.2)

org.apache.flink:flink-core MAVEN version =0.6-hadoop2-incubating, =0.0.62, =0.0.1, =8.1.0.371, =1.0.0, =1.0.0, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.2, =1.0.5, =1.0.2, =1.0.2, =1.0.0, =1.0.2, =1.0.7 and more Source cves: CVE-2020-1960 Source advisory: OSV:GHSA-6G88-99WJ-8MGG...

com.alibaba.alink:alink_connector_datahub_flink-1.10_2.11 (>=1.5.5 <=1.6.2), com.alibaba.alink:alink_connector_jdbc_derby_flink-1.10_2.11 (>=1.4.0 <=1.6.2) +141 more potentially affected by CVE-2020-1960 via org.apache.flink:flink-core (=1.10.0)

org.apache.flink:flink-core MAVEN version =1.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.flink:flink-core and may be impacted: - com.alibaba.alink:alinkconnectordatahubflink-1.102.11 =1.5.5, =1.4.0, =1.4.0, =1.4.0, =1.4.0, =1.4.0,...

Important: Red Hat Security Advisory: Red Hat Fuse 7.8.0 release and security update

A minor version update from 7.7 to 7.8 is now available for Red Hat Fuse. The purpose of this text-only errata is to inform you about the security issues fixed in this release. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring...

CVE-2020-1960

CVE-2020-1960 (Apache Flink) affects multiple Flink versions (1.1.0–1.10.0). When a process runs with an enabled JMXReporter and a port configured via metrics.reporter.reporter_name&gt;.port, a local attacker with access to the JMX port can perform a man-in-the-middle attack to rebind the JMXRMI ...