org.apache.nifi:nifi-ranger-nar (>=1.1.0, <=1.3.0), org.apache.nifi:nifi-ranger-plugin (>=1.1.0, <=1.3.0) +23 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.6.0)

org.apache.ranger:ranger-plugins-common MAVEN version 0.6.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.nifi:nifi-ranger-nar =1.1.0, =1.1.0, =1.3.0 -...

org.apache.nifi:nifi-ranger-nar (>=1.4.0, <=1.7.1), org.apache.nifi:nifi-ranger-plugin (>=1.4.0, <=1.7.1) +23 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.7.1)

org.apache.ranger:ranger-plugins-common MAVEN version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.nifi:nifi-ranger-nar =1.4.0, =1.4.0, =1.7.1 -...

org.apache.nifi.registry:nifi-registry-ranger-assembly (>=0.3.0, <=0.5.0), org.apache.nifi.registry:nifi-registry-ranger-plugin (>=0.3.0, <=0.5.0) +26 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (1.1.0)

org.apache.ranger:ranger-plugins-common MAVEN version 1.1.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - org.apache.nifi.registry:nifi-registry-ranger-assembly =0.3.0, =0.3.0, =0.5.0 -...

io.cdap.cdap:cdap-ranger-binding (>=0.18.0, <=0.19.0), org.apache.ranger:conditions-enrichers (0.7.0) +22 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (0.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version 0.7.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.ranger:ranger-plugins-common and may be impacted: - io.cdap.cdap:cdap-ranger-binding =0.18.0, =0.19.0 -...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +64 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (>=2.0.0, <=2.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version =2.0.0, =7.2.1, =0.8.44-4rc1, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.7.0, =0.7.0, =1.11.0, =1.11.0, =2.0.0, =1.3.0, =1.3.0, =2.0.0 and more Source cves: CVE-2025-59059 Source advisory:...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +64 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (>=2.0.0, <=2.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version =2.0.0, =7.2.1, =0.8.44-4rc1, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.7.0, =0.7.0, =1.11.0, =1.11.0, =2.0.0, =1.3.0, =1.3.0, =2.0.0 and more Source cves: CVE-2025-59059 Source advisory:...

com.expediagroup.apiary:apiary-ranger-metastore-plugin (>=7.2.1, <=8.2.7), com.witboost.provisioning:scala-mesh-ranger_2.13 (1.0.0) +67 more potentially affected by CVE-2025-59059 via org.apache.ranger:ranger-plugins-common (>=0.6.0, <=2.7.0)

org.apache.ranger:ranger-plugins-common MAVEN version =0.6.0, =7.2.1, =0.8.44-4rc1, =0.18.0, =466, =0.6.0-incubating, =0.8.0-incubating, =1.6.0-incubating, =1.6.0-incubating, =0.3.0, =0.3.0, =1.1.0, =1.1.0, =2.0.0, =1.3.0, =2.0.0 and more Source cves: CVE-2025-59059 Source advisory:...

org.apache.nifi:nifi-ranger-nar (>=1.1.0, <=1.3.0), org.apache.nifi:nifi-ranger-plugin (>=1.1.0, <=1.3.0) +23 more potentially affected by CVE-2016-8746 via org.apache.ranger:ranger-plugins-common (>=0.6.0, <=0.6.2)

org.apache.ranger:ranger-plugins-common MAVEN version =0.6.0, =1.1.0, =1.1.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.0, =0.6.2 and more Source cves: CVE-2016-8746 Source advisory: OSV:GHSA-XV7X-X6WR-XX7G...

Unintended Behaviours

ranger-plugins-common is vulnerable to unintended behaviors. It is possible because the policy resource matcher does not properly handle the policies with characters after a wildcard character, leading to unintended behaviors...