org.apache.ranger:conditions-enrichers (1.2.0), org.apache.ranger:embeddedwebserver (1.2.0) +25 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (1.2.0)

org.apache.ranger:ranger-plugins-common MAVEN version 1.2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 1.2.0 - org.apache.ranger:embeddedwebserve...

org.apache.ranger:conditions-enrichers (0.6.2), org.apache.ranger:embeddedwebserver (0.6.2) +21 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.6.2)

org.apache.ranger:ranger-plugins-common MAVEN version 0.6.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.ranger:conditions-enrichers 0.6.2 - org.apache.ranger:embeddedwebserve...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +64 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (>=2.0.0, <=2.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version =2.0.0, =7.2.1, =0.8.44-4rc1, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.7.0, =0.7.0, =1.11.0, =1.11.0, =2.0.0, =1.3.0, =1.3.0, =2.0.0 and more Source cves: CVE-2025-59059 Source advisory:...

Moderate severity vulnerability that affects org.apache.ranger:ranger

In environments that use external location for hive tables, Hive Authorizer in Apache Ranger before 0.7.1 should be checking RWX permission for create table...