co.cask.hydrator:hive-plugins (>=1.2.0, <=2.1.2), fr.jetoile.hadoop:hadoop-unit-oozie (>=2.3, <=3.8) +17 more potentially affected by CVE-2026-53561 via org.apache.hive:hive-service (>=4.0.0-alpha-1, <=4.2.0)

org.apache.hive:hive-service MAVEN version =4.0.0-alpha-1, =1.2.0, =2.3, =2.2.0, =1.0.0, =2.70.0, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-2 and more Source cves: CVE-2026-53561...

co.cask.hydrator:hive-plugins (>=1.2.0, <=2.1.2), io.cdap.plugin:hive-plugins (>=2.2.0, <=2.6.1) +25 more potentially affected by CVE-2026-55976 via org.apache.hive:hive-exec (>=4.0.0-alpha-1, <=4.2.0)

org.apache.hive:hive-exec MAVEN version =4.0.0-alpha-1, =1.2.0, =2.2.0, =5.11.0, =7.26.1, =2.70.0, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.2.0 and more Source cves: CVE-2026-55976 Source...

co.cask.hydrator:hive-plugins (>=1.2.0, <=2.1.2), com.expediagroup:drone-fly-app (>=1.0.9, <=1.0.10) +42 more potentially affected by CVE-2026-55976 via org.apache.hive:hive-common (>=4.0.0-alpha-1, <=4.2.0)

org.apache.hive:hive-common MAVEN version =4.0.0-alpha-1, =1.2.0, =1.0.9, =2.3, =2.2.0, =1.0.0, =5.11.0, =7.26.1, =2.70.0, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.2.0 and more Source cves: CVE-2026-55976 Source advisory:...

com.expediagroup:drone-fly-app (>=1.0.9, <=1.0.10), org.apache.hive:hive-beeline (>=4.0.0-alpha-1, <=4.2.0) +3 more potentially affected by CVE-2026-49845 via org.apache.hive:hive-standalone-metastore-server (>=4.0.0-alpha-1, <=4.2.0)

org.apache.hive:hive-standalone-metastore-server MAVEN version =4.0.0-alpha-1, =1.0.9, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.1.0, =4.1.0, =4.2.0 Source cves: CVE-2026-49845 Source advisory: MEND:CVE-2026-49845...

ai.chronon:flink_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:online_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +651 more potentially affected by CVE-2026-49845 via org.apache.hive:hive-exec (>=0.8.0, <=4.2.0)

org.apache.hive:hive-exec MAVEN version =0.8.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =3.18.0.9, =6.5.0,...

ai.chronon:flink_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:online_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +651 more potentially affected by CVE-2026-55976 via org.apache.hive:hive-exec (>=0.8.0, <=4.2.0)

org.apache.hive:hive-exec MAVEN version =0.8.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =3.18.0.9, =6.5.0,...

ai.chronon:flink_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:online_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +891 more potentially affected by CVE-2026-55976 via org.apache.hive:hive-serde (>=0.8.0, <=4.2.0)

org.apache.hive:hive-serde MAVEN version =0.8.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =3.18.0.9, =6.5.0,...

ai.chronon:flink_2.12 (>=def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, <=0.0.115), ai.chronon:online_2.12 (>=chaining-0.0.46-dev, <=0.0.115) +913 more potentially affected by CVE-2026-55976 via org.apache.hive:hive-common (>=0.8.0, <=4.2.0)

org.apache.hive:hive-common MAVEN version =0.8.0, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =chaining-0.0.46-dev, =chaining-0.0.46-dev, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =def544ccef5f753238ecc4adfc2eaa7d2fc36d53-0.0.91, =thread-pool-0.0.24-dev, =0.0.6, =3.18.0.9, =6.5.0,...

com.expediagroup:drone-fly-app (>=1.0.9, <=1.0.10), com.github.hiwepy:pac4j-biz (1.0.2.release) +20 more potentially affected by CVE-2026-40458 via org.pac4j:pac4j-core (4.5.5)

org.pac4j:pac4j-core MAVEN version 4.5.5 is affected by a known vulnerability. The following packages have a transitive dependency on org.pac4j:pac4j-core and may be impacted: - com.expediagroup:drone-fly-app =1.0.9, =1.0.3.release, =1.0.2.release, =4.0.0-alpha-2, =4.0.0-alpha-2, =4.0.0-alpha-2,...

org.apache.hive.hcatalog:hive-hcatalog-core (4.1.0), org.apache.hive.hcatalog:hive-hcatalog-pig-adapter (4.1.0) +10 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-metastore (4.1.0)

org.apache.hive:hive-metastore MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-metastore and may be impacted: - org.apache.hive.hcatalog:hive-hcatalog-core 4.1.0 -...

io.github.linghengqian:hive-server2-jdbc-driver-thin (2.0.0), nl.basjes.parse.useragent:yauaa-hive (7.32.0) +32 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-common (4.1.0)

org.apache.hive:hive-common MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-common and may be impacted: - io.github.linghengqian:hive-server2-jdbc-driver-thin 2.0.0 - nl.basjes.parse.useragent:yauaa-hive 7.32.0 ...

org.apache.hive.hcatalog:hive-hcatalog-core (4.1.0), org.apache.hive.hcatalog:hive-hcatalog-pig-adapter (4.1.0) +10 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-metastore (4.1.0)

org.apache.hive:hive-metastore MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-metastore and may be impacted: - org.apache.hive.hcatalog:hive-hcatalog-core 4.1.0 -...

org.apache.hive:hive-beeline (4.1.0), org.apache.hive:hive-hbase-handler (4.1.0) +2 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-standalone-metastore-server (4.1.0)

org.apache.hive:hive-standalone-metastore-server MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-standalone-metastore-server and may be impacted: - org.apache.hive:hive-beeline 4.1.0 -...

io.github.linghengqian:hive-server2-jdbc-driver-thin (2.0.0), nl.basjes.parse.useragent:yauaa-hive (7.32.0) +32 more potentially affected by CVE-2025-62728 via org.apache.hive:hive-common (4.1.0)

org.apache.hive:hive-common MAVEN version 4.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-common and may be impacted: - io.github.linghengqian:hive-server2-jdbc-driver-thin 2.0.0 - nl.basjes.parse.useragent:yauaa-hive 7.32.0 ...

com.datasalt.pangool:pangool-examples (>=0.60.0, <=0.70), com.esri.hadoop:spatial-sdk-hive (>=1.0.1, <=1.0.2) +34 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.10.0)

org.apache.hive:hive-exec MAVEN version 0.10.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.datasalt.pangool:pangool-examples =0.60.0, =1.0.1, =0.6, =0.6, =0.6, =0.6, =1.11.2, =0.5.5, =0.2.2, =0.2...

com.nflabs.zeppelin:zeppelin-cli (>=0.1.0, <=0.1.2), com.nflabs.zeppelin:zeppelin-server (>=0.1.0, <=0.1.2) +8 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.9.0)

org.apache.hive:hive-exec MAVEN version 0.9.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - com.nflabs.zeppelin:zeppelin-cli =0.1.0, =0.1.0, =0.1.0, =0.1.2 -...

org.apache.hive:hive-cli (0.8.0), org.apache.hive:hive-contrib (0.8.0) +4 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (0.8.0)

org.apache.hive:hive-exec MAVEN version 0.8.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - org.apache.hive:hive-cli 0.8.0 - org.apache.hive:hive-contrib 0.8.0 - org.apache.hive:hive-hbase-handler 0.8....

nl.basjes.parse.httpdlog:httpdlog-serde (5.11.0), nl.basjes.parse.useragent:yauaa-hive (>=7.26.1, <=7.28.1) +20 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (>=4.0.0-alpha-1, <=4.0.0)

org.apache.hive:hive-exec MAVEN version =4.0.0-alpha-1, =7.26.1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0 and more Source...

nl.basjes.parse.httpdlog:httpdlog-serde (5.11.0), nl.basjes.parse.useragent:yauaa-hive (>=7.26.1, <=7.28.1) +20 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (>=4.0.0-alpha-1, <=4.0.0)

org.apache.hive:hive-exec MAVEN version =4.0.0-alpha-1, =7.26.1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0-alpha-1, =4.0.0 and more Source...

co.elastic.release-test:dist (9.0.4), co.elastic.release-test:elasticsearch-hadoop-hive (9.0.4) +79 more potentially affected by CVE-2024-29869 via org.apache.hive:hive-exec (3.1.3)

org.apache.hive:hive-exec MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-exec and may be impacted: - co.elastic.release-test:dist 9.0.4 - co.elastic.release-test:elasticsearch-hadoop-hive 9.0.4 -...