org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

org.apache.hop:hop-transform-snowflake-bulkloader (>=2.2.0, <=2.4.0), org.finos.legend.engine:legend-engine-xt-persistence-component-relational-snowflake (>=release-4.96.3, <=4.141.0) +5 more potentially affected by CVE-2026-86597 via net.snowflake:snowflake-jdbc (3.13.19)

net.snowflake:snowflake-jdbc MAVEN version 3.13.19 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.apache.hop:hop-transform-snowflake-bulkloader =2.2.0, =release-4.96.3, =4.141.0 -...

org.liquibase:liquibase-cdi (>=4.13.0, <=4.14.0), org.liquibase:liquibase-maven-plugin (4.13.0) potentially affected by CVE-2026-3293 via net.snowflake:snowflake-jdbc (3.13.20)

net.snowflake:snowflake-jdbc MAVEN version 3.13.20 is affected by a known vulnerability. The following packages have a transitive dependency on net.snowflake:snowflake-jdbc and may be impacted: - org.liquibase:liquibase-cdi =4.13.0, =4.14.0 - org.liquibase:liquibase-maven-plugin 4.13.0 Source cve...

org.liquibase.ext:liquibase-hibernate (2.0.0), org.liquibase.ext:liquibase-mssql (1.2.0) +4 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (2.0.0)

org.liquibase:liquibase-core MAVEN version 2.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase.ext:liquibase-hibernate 2.0.0 - org.liquibase.ext:liquibase-mssql 1.2.0 -...

org.liquibase:liquibase-maven-plugin (2.0.4), org.liquibase:liquibase-osgi (2.0.4) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (2.0.4)

org.liquibase:liquibase-core MAVEN version 2.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 2.0.4 - org.liquibase:liquibase-osgi 2.0.4 Source cves:...

org.liquibase:liquibase-maven-plugin (3.0.3), org.liquibase:liquibase-osgi (3.0.3) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.3)

org.liquibase:liquibase-core MAVEN version 3.0.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 3.0.3 - org.liquibase:liquibase-osgi 3.0.3 Source cves:...

org.liquibase:liquibase-maven-plugin (2.0-rc7) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (2.0-rc7)

org.liquibase:liquibase-core MAVEN version 2.0-rc7 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 2.0-rc7 Source cves: CVE-2022-0839 Source advisory:...

org.liquibase:liquibase-maven-plugin (3.0.4), org.liquibase:liquibase-osgi (3.0.4) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.4)

org.liquibase:liquibase-core MAVEN version 3.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 3.0.4 - org.liquibase:liquibase-osgi 3.0.4 Source cves:...

org.liquibase:liquibase-cdi (3.2.1), org.liquibase:liquibase-debian (3.2.1) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.2.1)

org.liquibase:liquibase-core MAVEN version 3.2.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-cdi 3.2.1 - org.liquibase:liquibase-debian 3.2.1 -...

io.bootique.liquibase:bootique-liquibase (>=1.0.rc1, <=1.0), io.dropwizard:dropwizard-migrations (1.3.3) +2 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.6.0)

org.liquibase:liquibase-core MAVEN version 3.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - io.bootique.liquibase:bootique-liquibase =1.0.rc1, =1.0 - io.dropwizard:dropwizard-migrations 1.3.3 -...

org.liquibase:liquibase-maven-plugin (2.0-rc4) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (2.0-rc4)

org.liquibase:liquibase-core MAVEN version 2.0-rc4 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 2.0-rc4 Source cves: CVE-2022-0839 Source advisory:...

org.liquibase.ext:modify-column (2.0-rc5), org.liquibase:liquibase-maven-plugin (2.0-rc5) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (2.0-rc5)

org.liquibase:liquibase-core MAVEN version 2.0-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase.ext:modify-column 2.0-rc5 - org.liquibase:liquibase-maven-plugin 2.0-rc5 Source cves:...

org.liquibase:liquibase-maven-plugin (2.0-rc6) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (2.0-rc6)

org.liquibase:liquibase-core MAVEN version 2.0-rc6 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 2.0-rc6 Source cves: CVE-2022-0839 Source advisory:...

org.kuali.common:kuali-impex-export (>=3.0.0, <=3.0.3), org.liquibase:liquibase-maven-plugin (3.0.0-rc1) +1 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.0-rc1)

org.liquibase:liquibase-core MAVEN version 3.0.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.kuali.common:kuali-impex-export =3.0.0, =3.0.3 - org.liquibase:liquibase-maven-plugin 3.0.0-rc1...

org.liquibase:liquibase-maven-plugin (3.0.0-rc2), org.liquibase:liquibase-osgi (3.0.0-rc2) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.0-rc2)

org.liquibase:liquibase-core MAVEN version 3.0.0-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 3.0.0-rc2 - org.liquibase:liquibase-osgi 3.0.0-rc2 Source cves...

org.liquibase:liquibase-maven-plugin (3.0.0), org.liquibase:liquibase-osgi (3.0.0) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.0)

org.liquibase:liquibase-core MAVEN version 3.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 3.0.0 - org.liquibase:liquibase-osgi 3.0.0 Source cves:...

org.liquibase:liquibase-cdi (3.3.4), org.liquibase:liquibase-maven-plugin (3.3.4) +1 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.3.4)

org.liquibase:liquibase-core MAVEN version 3.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-cdi 3.3.4 - org.liquibase:liquibase-maven-plugin 3.3.4 -...

org.liquibase:liquibase-maven-plugin (3.0.1), org.liquibase:liquibase-osgi (3.0.1) potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.1)

org.liquibase:liquibase-core MAVEN version 3.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - org.liquibase:liquibase-maven-plugin 3.0.1 - org.liquibase:liquibase-osgi 3.0.1 Source cves:...

ch.inftec.ju:ju-dbutil-test (4.1), com.aceevo.ursus:ursus-db (>=0.2.11, <=0.2.15) +11 more potentially affected by CVE-2022-0839 via org.liquibase:liquibase-core (3.0.7)

org.liquibase:liquibase-core MAVEN version 3.0.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.liquibase:liquibase-core and may be impacted: - ch.inftec.ju:ju-dbutil-test 4.1 - com.aceevo.ursus:ursus-db =0.2.11, =2.3, =1.0.0, =1.0.0, =1.0.0,...