com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +68 more potentially affected by CVE-2026-32227 via org.apache.ranger:ranger-plugins-common (>=2.0.0, <=2.8.0)

org.apache.ranger:ranger-plugins-common MAVEN version =2.0.0, =7.2.1, =0.8.44-4rc1, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.7.0, =0.7.0, =1.11.0, =1.11.0, =2.0.0, =1.3.0, =1.3.0, =2.0.0 and more Source cves: CVE-2026-32227 Source advisory:...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +71 more potentially affected by CVE-2026-55799 via org.apache.ranger:ranger-plugins-common (>=0.6.0, <=2.8.0)

org.apache.ranger:ranger-plugins-common MAVEN version =0.6.0, =7.2.1, =0.8.44-4rc1, =0.18.0, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.3.0, =0.3.0, =1.1.0, =1.1.0, =2.0.0, =1.3.0, =2.0.0 and more Source cves: CVE-2026-55799 Source advisory:...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +71 more potentially affected by CVE-2026-65942 via org.apache.ranger:ranger-plugins-common (>=0.6.0, <=2.8.0)

org.apache.ranger:ranger-plugins-common MAVEN version =0.6.0, =7.2.1, =0.8.44-4rc1, =0.18.0, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.3.0, =0.3.0, =1.1.0, =1.1.0, =2.0.0, =1.3.0, =2.0.0 and more Source cves: CVE-2026-65942 Source advisory:...

org.apache.ranger:conditions-enrichers (0.6.3), org.apache.ranger:embeddedwebserver (0.6.3) +21 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.6.3)

org.apache.ranger:ranger-plugins-common MAVEN version 0.6.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 0.6.3 - org.apache.ranger:embeddedwebserve...

org.apache.nifi:nifi-ranger-nar (>=1.8.0, <=1.10.0), org.apache.nifi:nifi-ranger-plugin (>=1.8.0, <=1.10.0) +24 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (1.0.0)

org.apache.ranger:ranger-plugins-common MAVEN version 1.0.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.nifi:nifi-ranger-nar =1.8.0, =1.8.0, =1.10.0 -...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +64 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (>=2.0.0, <=2.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version =2.0.0, =7.2.1, =0.8.44-4rc1, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.7.0, =0.7.0, =1.11.0, =1.11.0, =2.0.0, =1.3.0, =1.3.0, =2.0.0 and more Source cves: CVE-2025-59059 Source advisory:...

io.cdap.cdap:cdap-ranger-binding (>=0.18.0, <=0.19.0), org.apache.ranger:conditions-enrichers (0.7.0) +22 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - io.cdap.cdap:cdap-ranger-binding =0.18.0, =0.19.0 -...

org.apache.ranger:conditions-enrichers (1.2.0), org.apache.ranger:embeddedwebserver (1.2.0) +25 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (1.2.0)

org.apache.ranger:ranger-plugins-common MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 1.2.0 - org.apache.ranger:embeddedwebserve...

org.apache.ranger:conditions-enrichers (0.6.1), org.apache.ranger:embeddedwebserver (0.6.1) +21 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.6.1)

org.apache.ranger:ranger-plugins-common MAVEN version 0.6.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 0.6.1 - org.apache.ranger:embeddedwebserve...

org.apache.ranger:conditions-enrichers (0.6.2), org.apache.ranger:embeddedwebserver (0.6.2) +21 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.6.2)

org.apache.ranger:ranger-plugins-common MAVEN version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 0.6.2 - org.apache.ranger:embeddedwebserve...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181847...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: OSV:GHSA-F6M8-QM7J-FH65...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: OSV:GHSA-P86W-W5RH-M3HX...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.0), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-30067 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.0)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-30067 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-9538803...

org.apache.kylin:kylin-spark-test (4.0.0-alpha), org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=4.0.0-alpha) +2 more potentially affected by CVE-2022-44621 via org.apache.kylin:kylin-server-base (>=2.1.0, <=4.0.0-alpha)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.4.0 Source cves: CVE-2022-44621 Source advisory: MEND:CVE-2022-44621...

org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=2.6.4), org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=2.2.0) +1 more potentially affected by CVE-2020-1937 via org.apache.kylin:kylin-server-base (>=2.1.0, <=2.6.4)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.2.0 Source cves: CVE-2020-1937 Source advisory: OSV:GHSA-7HMH-8GWV-MFVQ...

org.apache.kylin:kylin-tool-assembly (2.6.4), org.apache.ranger:ranger-kylin-plugin (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2020-13925 via org.apache.kylin:kylin-server-base (2.6.4)

org.apache.kylin:kylin-server-base MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.4 - org.apache.ranger:ranger-kylin-plugin =2.1.0,...