org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: GHSA-F6M8-QM7J-FH65...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61733 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61733 Source advisory: GHSA-MR9J-4J48-XCM2...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: GHSA-P86W-W5RH-M3HX...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: SNYK:JAVA-ORGAPACHEKYLIN-13181860...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61735 Source advisory: MEND:CVE-2025-61735...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61735 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61733 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61733 Source advisory: MEND:CVE-2025-61733...

org.apache.kylin:kylin-engine-build-sdk (>=5.0.0-alpha, <=5.0.2), org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0) +1 more potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-common (>=4.0.4, <=5.0.2)

org.apache.kylin:kylin-core-common MAVEN version =4.0.4, =5.0.0-alpha, =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-61734 Source advisory: MEND:CVE-2025-61734...

org.apache.ranger:ranger-kylin-plugin (>=2.5.0, <=2.9.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.5.0, <=2.9.0) potentially affected by CVE-2025-61734 via org.apache.kylin:kylin-core-metadata (4.0.4)

org.apache.kylin:kylin-core-metadata MAVEN version 4.0.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-metadata and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.5.0, =2.5.0, =2.9.0 Source cves: CVE-2025-6173...

org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=1.2.0), org.apache.ranger:ranger-kylin-plugin-shim (>=1.1.0, <=1.2.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (2.3.0)

org.apache.kylin:kylin-core-common MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.ranger:ranger-kylin-plugin =1.1.0, =1.1.0, =1.2.0 Source cves: CVE-2022-24697...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-core-common (3.1.3)

org.apache.kylin:kylin-core-common MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-core-common and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0, =2.4.0 Source cves: CVE-2022-24697...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (3.1.3)

org.apache.kylin:kylin-server-base MAVEN version 3.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0, =2.4.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-tool-assembly (2.6.4), org.apache.ranger:ranger-kylin-plugin (>=2.1.0, <=2.2.0) +1 more potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.6.4)

org.apache.kylin:kylin-server-base MAVEN version 2.6.4 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.kylin:kylin-tool-assembly 2.6.4 - org.apache.ranger:ranger-kylin-plugin =2.1.0,...

org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=1.2.0), org.apache.ranger:ranger-kylin-plugin-shim (>=1.1.0, <=1.2.0) potentially affected by CVE-2022-24697 via org.apache.kylin:kylin-server-base (2.3.0)

org.apache.kylin:kylin-server-base MAVEN version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.kylin:kylin-server-base and may be impacted: - org.apache.ranger:ranger-kylin-plugin =1.1.0, =1.1.0, =1.2.0 Source cves: CVE-2022-24697...

org.apache.kylin:kylin-spark-test (4.0.0-alpha), org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=4.0.0-alpha) +2 more potentially affected by CVE-2022-44621 via org.apache.kylin:kylin-server-base (>=2.1.0, <=4.0.0-alpha)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.4.0 Source cves: CVE-2022-44621 Source advisory: GHSA-W9RV-XMF7-X3GH...

org.apache.ranger:ranger-kylin-plugin (>=2.3.0, <=2.4.0), org.apache.ranger:ranger-kylin-plugin-shim (>=2.3.0, <=2.4.0) +12 more potentially affected by CVE-2022-22978 via org.springframework.security:spring-security-core (4.2.14.release)

org.springframework.security:spring-security-core MAVEN version 4.2.14.release is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework.security:spring-security-core and may be impacted: - org.apache.ranger:ranger-kylin-plugin =2.3.0, =2.3.0...

org.apache.kylin:kylin-tool-assembly (>=2.1.0, <=2.6.4), org.apache.ranger:ranger-kylin-plugin (>=1.1.0, <=2.2.0) +1 more potentially affected by CVE-2020-1937 via org.apache.kylin:kylin-server-base (>=2.1.0, <=2.6.4)

org.apache.kylin:kylin-server-base MAVEN version =2.1.0, =2.1.0, =1.1.0, =1.1.0, =2.2.0 Source cves: CVE-2020-1937 Source advisory: GHSA-7HMH-8GWV-MFVQ...