org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

com.snowflake:snowflake-maven-plugin (0.1.0), org.liquibase:liquibase-cdi (>=4.19.1, <=4.20.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.27)

net.snowflake:snowflake-jdbc MAVEN version 3.13.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowflake-maven-plugin 0.1.0 - org.liquibase:liquibase-cdi =4.19.1, =4.20.0 Source cves...

org.apache.hop:hop-transform-snowflake-bulkloader (>=2.2.0, <=2.4.0), org.finos.legend.engine:legend-engine-xt-persistence-component-relational-snowflake (>=release-4.96.3, <=4.141.0) +5 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.19)

net.snowflake:snowflake-jdbc MAVEN version 3.13.19 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.2.0, =release-4.96.3, =4.141.0 -...

com.snowflake:snowflake-maven-plugin (0.1.0), org.liquibase:liquibase-cdi (>=4.19.1, <=4.20.0) potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.27)

net.snowflake:snowflake-jdbc MAVEN version 3.13.27 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - com.snowflake:snowflake-maven-plugin 0.1.0 - org.liquibase:liquibase-cdi =4.19.1, =4.20.0 Source cves...

io.apiman:apiman-manager-api-jpa (>=3.0.0.rc6, <=3.1.3.final), io.apiman:apiman-manager-api-micro (>=3.0.0.rc6, <=3.1.3.final) +8 more potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.21)

net.snowflake:snowflake-jdbc MAVEN version 3.13.21 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - io.apiman:apiman-manager-api-jpa =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =3.0.0.rc6, =4.15.0, =16.17.1,...

org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

org.liquibase:liquibase-cdi (3.2.1), org.liquibase:liquibase-debian (3.2.1) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.2.1)

org.liquibase:liquibase-core MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-cdi 3.2.1 - org.liquibase:liquibase-debian 3.2.1 -...

io.bootique.liquibase:bootique-liquibase (>=1.0.rc1, <=1.0), io.dropwizard:dropwizard-migrations (1.3.3) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.6.0)

org.liquibase:liquibase-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - io.bootique.liquibase:bootique-liquibase =1.0.rc1, =1.0 - io.dropwizard:dropwizard-migrations 1.3.3 -...

org.liquibase:liquibase-cdi (3.3.4), org.liquibase:liquibase-maven-plugin (3.3.4) +1 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.3.4)

org.liquibase:liquibase-core MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-cdi 3.3.4 - org.liquibase:liquibase-maven-plugin 3.3.4 -...

ch.inftec.ju:ju-dbutil-test (4.1), com.aceevo.ursus:ursus-db (>=0.2.11, <=0.2.15) +11 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.7)

org.liquibase:liquibase-core MAVEN version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - ch.inftec.ju:ju-dbutil-test 4.1 - com.aceevo.ursus:ursus-db =0.2.11, =2.3, =1.0.0, =1.0.0, =1.0.0,...