ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +7847 more potentially affected by CVE-2026-6790 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.58.v20250814)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.42.0.4 and more Source cves: CVE-2026-6790 Source advisory: OSV:GHSA-7P3P-8QV8-M2VH...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6, <=1.2.10) +7501 more potentially affected by CVE-2024-13009 via org.eclipse.jetty:jetty-server (>=9.4.0.v20161208, <=9.4.56.v20240826)

org.eclipse.jetty:jetty-server MAVEN version =9.4.0.v20161208, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =0.1.7, =0.1.7, =3.30.0.7, =3.30.0.7, =3.38.0.1, =3.36.0.1, =3.30.0.7-1-2.1, =3.46.0.6-1-2.4 and more Source cves: CVE-2024-13009 Source advisory: OSV:GHSA-Q4RV-GQ96-W7C5...

ai.h2o:h2o-app (0.1.21), ai.h2o:sparkling-water-core_2.10 (0.2.5) +1 more potentially affected by CVE-2024-7768 via ai.h2o:h2o-core (0.1.21)

ai.h2o:h2o-core MAVEN version 0.1.21 is affected by a known vulnerability. The following packages have a transitive dependency on ai.h2o:h2o-core and may be impacted: - ai.h2o:h2o-app 0.1.21 - ai.h2o:sparkling-water-core2.10 0.2.5 - ai.h2o:sparkling-water-examples2.10 0.2.5 Source cves:...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +9384 more potentially affected by CVE-2021-27568 via net.minidev:json-smart (>=2.0, <=2.3)

net.minidev:json-smart MAVEN version =2.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.4...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.30.0.6) +5089 more potentially affected by CVE-2019-10247 via org.eclipse.jetty:jetty-server (>=7.0.0.v20091005, <=9.2.27.v20190403)

org.eclipse.jetty:jetty-server MAVEN version =7.0.0.v20091005, =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1, =3.14.0.1, =3.10.5.1, =3.22.1.1, =3.10.0.5, =3.10.0.7, =3.20.0.1, =3.0.1.2, =3.20.0.4, =3.22.0.5 and more Source cves: CVE-2019-10247 Source advisory:...

ai.h2o:h2o-algos (>=3.0.1.2, <=3.22.0.5), ai.h2o:h2o-app (>=3.0.1.2, <=3.22.0.5) +153 more potentially affected by CVE-2019-10241 via org.eclipse.jetty:jetty-server (8.1.17.v20150415)

org.eclipse.jetty:jetty-server MAVEN version 8.1.17.v20150415 is affected by a known vulnerability. The following packages have a transitive dependency on org.eclipse.jetty:jetty-server and may be impacted: - ai.h2o:h2o-algos =3.0.1.2, =3.0.1.2, =3.12.0.1, =3.8.2.4, =3.0.1.2, =3.14.0.7, =3.16.0.1...