ai.onehouse:lakeview-sync-tool (>=0.18.5, <=0.33.0), com.alibaba.hbase:alihbase-connector (>=2.0.29.2, <=2.1.2.2) +206 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.10.0)

org.apache.hadoop:hadoop-common MAVEN version 2.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ai.onehouse:lakeview-sync-tool =0.18.5, =2.0.29.2, =0.3.0, =0.3.0, =2.10.6.9, =3.0.0, =3.0.0,...

org.apache.hadoop:hadoop-client (0.23.10), org.securegraph:securegraph-accumulo (>=0.5.0, <=0.8.1) +5 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (0.23.10)

org.apache.hadoop:hadoop-common MAVEN version 0.23.10 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - org.apache.hadoop:hadoop-client 0.23.10 - org.securegraph:securegraph-accumulo =0.5.0, =0.5.0,...

cn.sliew:flinkful-cli-descriptor (>=1.0.0, <=1.0.1_8), cn.vanne:press (1.0.0) +74 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.4.1)

org.apache.hadoop:hadoop-common MAVEN version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - cn.sliew:flinkful-cli-descriptor =1.0.0, =0.9.5, =0.9.5, =0.9.5, =0.9.5, =0.9.5, =0.9.5, =0.9.5,...

com.aliyun.odps:cupid-datasource_2.11 (1.0.0), com.github.jaimess:quick-orc (0.0.1) +32 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.6.4)

org.apache.hadoop:hadoop-common MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.aliyun.odps:cupid-datasource2.11 1.0.0 - com.github.jaimess:quick-orc 0.0.1 -...

ai.chronon:aggregator_2.11 (>=chaining-0.0.46-dev, <=0.0.115), ai.chronon:api_2.11 (>=chaining-0.0.46-dev, <=0.0.115) +1295 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.6.5)

org.apache.hadoop:hadoop-common MAVEN version 2.6.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ai.chronon:aggregator2.11 =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev,...

co.cask:google-cloud (>=0.11.0, <=0.11.2), com.alibaba.alink:alink_connector_parquet_flink-1.10_2.11 (>=1.5.4, <=1.6.2) +81 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.8.0)

org.apache.hadoop:hadoop-common MAVEN version 2.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - co.cask:google-cloud =0.11.0, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.5.4, =1.0.4, =1.1.1, =6.143.177,...

ai.grakn:client-java (>=1.3.0, <=1.4.3), ai.grakn:grakn-bootup (>=v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744, <=1.2.0) +495 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.7.2)

org.apache.hadoop:hadoop-common MAVEN version 2.7.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ai.grakn:client-java =1.3.0, =v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744,...

ai.h2o:h2o-app (>=3.20.0.9, <=3.20.0.10), ai.h2o:h2o-ext-krbstandalone (>=3.20.0.9, <=3.20.0.10) +344 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.7.7)

org.apache.hadoop:hadoop-common MAVEN version 2.7.7 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ai.h2o:h2o-app =3.20.0.9, =3.20.0.9, =3.20.0.9, =3.20.0.9, =3.20.0.9, =2.1.40, =2.1.40, =2.1.40,...

ai.h2o:h2o-app (>=3.22.0.1, <=3.28.0.1), ai.h2o:h2o-ext-krbstandalone (>=3.22.0.1, <=3.42.0.4) +98 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.8.4)

org.apache.hadoop:hadoop-common MAVEN version 2.8.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - ai.h2o:h2o-app =3.22.0.1, =3.22.0.1, =3.22.0.1, =3.22.0.1, =3.22.0.1, =2.1.42, =2.1.42, =2.1.42,...

com.aliyun.emr:emr-core (>=1.4.2, <=1.6.0), com.aliyun.emr:emr-datahub_2.11 (>=1.4.4, <=2.2.0) +104 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (2.9.0)

org.apache.hadoop:hadoop-common MAVEN version 2.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hadoop:hadoop-common and may be impacted: - com.aliyun.emr:emr-core =1.4.2, =1.4.4, =1.7.0, =1.4.2, =1.7.0, =1.9.0, =1.9.0, =1.4.2, =1.4.2,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.catboost:catboost-spark_3.2_2.12 (>=1.0.6, <=1.2.10) +2245 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (>=3.0.0-alpha1, <=3.3.6)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0-alpha1, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.3, =1.2.3, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +6723 more potentially affected by CVE-2024-23454 via org.apache.hadoop:hadoop-common (>=0.22.0, <=3.3.6)

org.apache.hadoop:hadoop-common MAVEN version =0.22.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2024-23454 Source advisory: MEND:CVE-2024-23454...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +5265 more potentially affected by CVE-2022-25168 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.10.1)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2022-25168...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +5265 more potentially affected by CVE-2022-25168 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.10.1)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2022-25168...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +1305 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.0.0, <=3.2.2)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3,...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +1305 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.0.0, <=3.2.2)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +5277 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=0.22.0, <=2.10.1)

org.apache.hadoop:hadoop-common MAVEN version =0.22.0, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =local, =local, =0.42.1, =0.78.8 and more Source cves: CVE-2021-37404 Source...

ai.catboost:catboost-spark_3.1_2.12 (>=1.0.1, <=1.2.8), ai.chronon:aggregator_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +1305 more potentially affected by CVE-2021-37404 via org.apache.hadoop:hadoop-common (>=3.0.0, <=3.2.2)

org.apache.hadoop:hadoop-common MAVEN version =3.0.0, =1.0.1, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =0.0.2, =3.34.0.3-1-3.1, =0.0.3,...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +1140 more potentially affected by CVE-2014-0229 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.4.0)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.2.5, =2.0.0, =0.2.5, =2.0.0, =1.6.4, =2.0.0, =1.4.11, =2.0.0, =1.0.0, =0.5.2, =1.0, =2.0 - ch.cern.sparkmeasure:spark-measure2.11 0.11 and more Source cves: CVE-2014-0229 Source advisory: OSV:GHSA-9R7G-325H-MXRM...

ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +1140 more potentially affected by CVE-2014-0229 via org.apache.hadoop:hadoop-common (>=2.0.4-alpha, <=2.4.0)

org.apache.hadoop:hadoop-common MAVEN version =2.0.4-alpha, =0.2.5, =2.0.0, =0.2.5, =2.0.0, =1.6.4, =2.0.0, =1.4.11, =2.0.0, =1.0.0, =0.5.2, =1.0, =2.0 - ch.cern.sparkmeasure:spark-measure2.11 0.11 and more Source cves: CVE-2014-0229 Source advisory: GHSA-9R7G-325H-MXRM...