ae.teletronics.nlp:entityextraction (=1.3), ae.teletronics.nlp:w2vec (=1.0) +6679 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (>=0.22.0 <=3.3.6)

org.apache.hadoop:hadoop-common MAVEN version =0.22.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2024-23454 Source advisory: OSV:GHSA-F5FW-25GW-5M92...

ai.onehouse:lakeview-sync-tool (>=0.18.5 <=0.28.0), com.4paradigm.openmldb:openmldb-taskmanager (>=0.4.2 <=0.6.2) +398 more potentially affected by CVE-2022-25168 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha <=2.10.1)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.18.5, =0.4.2, =2.0.29.2, =0.3.0, =0.3.0, =2.10.6.9, =3.0.0, =3.0.0, =0.24.0, =0.24.0, =0.24.0, =0.24.0, =0.19.3, =0.19.3, =0.26.0 and more Source cves: CVE-2022-25168 Source advisory: OSV:GHSA-8WM5-8H9C-47PC...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.chronon:aggregator_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +1329 more potentially affected by CVE-2022-25168 via org.apache.hadoop:hadoop-common (>=3.0.0-alpha1 <=3.2.3)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0-alpha1, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =0.0.8, =0.0.6, =0.0.2, =0.1.7, =3.34.0.3-1-3.1, =0.0.3, =1.0.0, =1.8.0 and more Source cves: CVE-2022-25168 Source advisory: OSV:GHSA-8WM5-8H9C-47PC...

ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6 <=1.2.10), ai.catboost:catboost-spark_3.2_2.13 (>=1.0.6 <=1.2.10) +647 more potentially affected by CVE-2022-25168 via org.apache.hadoop:hadoop-common (>=3.3.0 <=3.3.2)

org.apache.hadoop:hadoop-common MAVEN version =3.3.0, =1.0.6, =1.0.6, =1.1, =1.1.1, =0.13.0, =0.2.7, =0.2.7, =0.6.1.2, =1.0.0, =1.0.0, =0.2.2, =1.0.0, =1.0.0, =0.2.2, =0.4.1 and more Source cves: CVE-2022-25168 Source advisory: OSV:GHSA-8WM5-8H9C-47PC...

ai.onehouse:lakeview-sync-tool (>=0.18.5 <=0.28.0), com.4paradigm.openmldb:openmldb-taskmanager (>=0.4.2 <=0.6.2) +415 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=0.22.0 <=2.10.1)

org.apache.hadoop:hadoop-common MAVEN version =0.22.0, =0.18.5, =0.4.2, =2.0.29.2, =0.3.0, =0.3.0, =2.10.6.9, =3.0.0, =3.0.0, =0.24.0, =0.24.0, =0.24.0, =0.24.0, =0.19.3, =0.19.3, =0.26.0 and more Source cves: CVE-2021-37404 Source advisory: OSV:GHSA-RMPJ-7C96-MRG8...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.chronon:aggregator_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +1301 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.0.0 <=3.2.2)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =0.0.8, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3, =1.0.0, =1.4.0, =1.5.0 and more Source cves: CVE-2021-37404 Source advisory: OSV:GHSA-RMPJ-7C96-MRG8...

co.cask.tephra:tephra-examples (>=0.6.2 <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0 <=0.7.1) +356 more potentially affected by CVE-2015-1776 via org.apache.hadoop:hadoop-common (>=2.6.0 <=2.6.4)

org.apache.hadoop:hadoop-common MAVEN version =2.6.0, =0.6.2, =0.6.0, =1.7.0, =1.1.0, =1.1.0, =7.2.1, =3.0.0, =3.0.0, =7.2.1, =3.0.0, =3.0.0, =3.0.0, =3.6.7 and more Source cves: CVE-2015-1776 Source advisory: OSV:GHSA-G48F-FF5H-5F64...

ai.grakn:client-java (>=1.3.0 <=1.4.3), ai.grakn:grakn-bootup (>=1.1.0 <=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744) +1030 more potentially affected by CVE-2016-5393 via org.apache.hadoop:hadoop-common (>=2.7.0 <=2.7.2)

org.apache.hadoop:hadoop-common MAVEN version =2.7.0, =1.3.0, =1.1.0, =1.0.0, =0.7.0, =0.12.0, =1.2.0, =0.12.0, =1.0.0, =1.2.0, =0.17.0, =0.10.0, =0.15.0, =0.6.1, =1.0.0, =1.1.0 and more Source cves: CVE-2016-5393 Source advisory: OSV:GHSA-7Q56-MP4C-GGGGhttps://vulners.com...

co.cask.tephra:tephra-examples (>=0.6.2 <=0.7.1), co.cask.tephra:tephra-hbase-compat-1.0-cdh (>=0.6.0 <=0.7.1) +356 more potentially affected by CVE-2016-5393 via org.apache.hadoop:hadoop-common (>=2.6.0 <=2.6.4)

org.apache.hadoop:hadoop-common MAVEN version =2.6.0, =0.6.2, =0.6.0, =1.7.0, =1.1.0, =1.1.0, =7.2.1, =3.0.0, =3.0.0, =7.2.1, =3.0.0, =3.0.0, =3.0.0, =3.6.7 and more Source cves: CVE-2016-5393 Source advisory: OSV:GHSA-7Q56-MP4C-GGGG...

de.tudarmstadt.ukp.dkpro.bigdata:de.tudarmstadt.ukp.dkpro.bigdata.collocations (=0.1.0), org.apache.hadoop:hadoop-client (>=2.0.4-alpha <=2.0.5-alpha) +1 more potentially affected by CVE-2013-2192 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha <=2.0.5-alpha)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =2.0.4-alpha, =0.95.2-hadoop21, =0.95.2-hadoop23 Source cves: CVE-2013-2192 Source advisory: OSV:GHSA-PXV5-5VMP-3JJ4...

org.apache.hadoop:hadoop-client (>=0.23.7 <=0.23.11), org.apache.hama:hama-yarn (>=0.5.0 <=0.6.2) +6 more potentially affected by CVE-2013-2192 via org.apache.hadoop:hadoop-common (>=0.23.1 <=0.23.8)

org.apache.hadoop:hadoop-common MAVEN version =0.23.1, =0.23.7, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0, =0.5.0, =0.5.0, =0.8.1 Source cves: CVE-2013-2192 Source advisory: OSV:GHSA-PXV5-5VMP-3JJ4...

ae.teletronics.nlp:entityextraction (=1.3), ae.teletronics.nlp:w2vec (=1.0) +1696 more potentially affected by CVE-2014-0229 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha <=2.4.0)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.2.5, =2.0.0, =0.2.5, =2.0.0, =1.6.4, =2.0.0, =1.4.11, =2.0.0, =1.0.0, =0.18.5, =0.5.2, =1.0, =2.0 and more Source cves: CVE-2014-0229 Source advisory: OSV:GHSA-9R7G-325H-MXRM...

org.apache.hadoop:hadoop-client (=0.23.10), org.apache.hama:hama-yarn (>=0.5.0 <=0.6.2) +6 more potentially affected by CVE-2014-0229 via org.apache.hadoop:hadoop-common (>=0.23.1 <=0.23.10)

org.apache.hadoop:hadoop-common MAVEN version =0.23.1, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.6.0, =0.5.0, =0.5.0, =0.8.1 Source cves: CVE-2014-0229 Source advisory: OSV:GHSA-9R7G-325H-MXRM...

ae.teletronics.nlp:entityextraction (=1.3), ae.teletronics.nlp:w2vec (=1.0) +4980 more potentially affected by CVE-2017-7669 via org.apache.hadoop:hadoop-common (>=0.22.0 <=2.8.0)

org.apache.hadoop:hadoop-common MAVEN version =0.22.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.1, =0.0.1, =0.42.1, =0.78.8 and more Source cves: CVE-2017-7669 Source advisory: OSV:GHSA-H24P-QWF4-84Q8...

org.apache.hadoop.contrib:hadoop-hdfs-bkjournal (=3.0.0-alpha1), org.apache.hadoop:hadoop-aliyun (=3.0.0-alpha2) +54 more potentially affected by CVE-2017-7669 via org.apache.hadoop:hadoop-common (>=3.0.0-alpha1 <=3.0.0-alpha2)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha1, =3.0.0-alpha2 and more Source cves: CVE-2017-7669 Source advisory:...

ae.teletronics.nlp:entityextraction (=1.3), ae.teletronics.nlp:w2vec (=1.0) +4354 more potentially affected by CVE-2016-6811 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha <=2.7.3)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =0.0.25, =0.0.25, =0.0.25, =0.0.86, =0.0.1, =0.0.1, =0.42.1, =0.78.8 and more Source cves: CVE-2016-6811 Source advisory: OSV:GHSA-MF7C-35MQ-75PJ...

ai.grakn:grakn-dist (>=0.7.0 <=0.14.0), ai.grakn:grakn-engine (>=0.12.0 <=0.16.0) +638 more potentially affected by CVE-2016-5001 via org.apache.hadoop:hadoop-common (>=2.7.0 <=2.7.1)

org.apache.hadoop:hadoop-common MAVEN version =2.7.0, =0.7.0, =0.12.0, =0.12.0, =0.10.0, =0.15.0, =0.6.1, =0.12.1, =0.11.0, =0.21.3-public, =3.3.2-public, =lxw-test-3.0.0-public and more Source cves: CVE-2016-5001 Source advisory: OSV:GHSA-8R28-R8CP-G6CP...

Arbitrary File Write

hadoop-common is vulnerable to arbitrary file write.The vulnerable exists in the function unTar in FileUtil.java which allows an attacker to extract arbitrary files using symlink name...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1 <=1.2.8), ai.chronon:aggregator_2.12 (>=0.0.25 <=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91) +840 more potentially affected by CVE-2022-26612 via org.apache.hadoop:hadoop-common (>=3.2.0 <=3.2.2)

org.apache.hadoop:hadoop-common MAVEN version =3.2.0, =1.0.1, =0.0.25, =0.0.25, =0.0.62, =0.0.25, =0.0.86, =0.0.8, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3, =1.0.0, =1.4.0, =1.4.0, =1.7.0 and more Source cves: CVE-2022-26612 Source advisory: OSV:GHSA-GX2C-FVHC-PH4J...

ai.onehouse:lakeview-sync-tool (>=0.18.5 <=0.28.0), com.4paradigm.openmldb:openmldb-taskmanager (>=0.4.2 <=0.6.2) +415 more potentially affected by CVE-2022-26612 via org.apache.hadoop:hadoop-common (>=0.22.0 <=2.10.1)

org.apache.hadoop:hadoop-common MAVEN version =0.22.0, =0.18.5, =0.4.2, =2.0.29.2, =0.3.0, =0.3.0, =2.10.6.9, =3.0.0, =3.0.0, =0.24.0, =0.24.0, =0.24.0, =0.24.0, =0.19.3, =0.19.3, =0.26.0 and more Source cves: CVE-2022-26612 Source advisory: OSV:GHSA-GX2C-FVHC-PH4J...