org.apache.hama:hama-yarn (>=0.5.0, <=0.6.2) potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (0.23.1)

org.apache.hadoop:hadoop-common MAVEN version 0.23.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - org.apache.hama:hama-yarn =0.5.0, =0.6.2 Source cves: CVE-2024-23454 Source advisory:...