org.apache.hive:hive-llap-client (2.3.6), org.apache.hive:hive-llap-tez (2.3.6) +5 more potentially affected by CVE-2024-23953 via org.apache.hive:hive-llap-common (2.3.6)

org.apache.hive:hive-llap-common MAVEN version 2.3.6 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.hive:hive-llap-common and may be impacted: - org.apache.hive:hive-llap-client 2.3.6 - org.apache.hive:hive-llap-tez 2.3.6 -...

com.pingcap.tispark:spark-wrapper-spark-2.4 (>=2.4.4-scala_2.12-rc1, <=2.4.4-scala_2.12), com.pingcap.tispark:tispark-assembly (>=2.4.4-scala_2.12-rc1, <=2.4.4-scala_2.12) +1 more potentially affected by CVE-2024-23945 via org.apache.spark:spark-hive-thriftserver_2.12 (2.4.8)

org.apache.spark:spark-hive-thriftserver2.12 MAVEN version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-hive-thriftserver2.12 and may be impacted: - com.pingcap.tispark:spark-wrapper-spark-2.4 =2.4.4-scala2.12-rc1,...

com.pingcap.tispark:spark-wrapper-spark-3.0 (>=2.5.0-rc.1, <=2.5.3), com.pingcap.tispark:spark-wrapper-spark-3.0_2.12 (>=3.0.1, <=3.2.3) +20 more potentially affected by CVE-2024-23945 via org.apache.spark:spark-hive-thriftserver_2.12 (>=3.0.0, <=3.3.1)

org.apache.spark:spark-hive-thriftserver2.12 MAVEN version =3.0.0, =2.5.0-rc.1, =3.0.1, =2.5.0-rc.1, =3.0.1, =3.0.1, =3.1.0, =2.5.0-rc.1, =2.5.1, =3.0.1, =2.5.1, =3.0.1, =3.0.1, =3.1.0, =2.5.0-rc.1, =3.0.1-6.2.12-jpmc, =6.3.0-3.3.0 and more Source cves: CVE-2024-23945 Source advisory:...

CVE-2024-23945: Generation of Error Message Containing Sensitive Information

Signing cookies is an application security feature that adds a digital signature to cookie data to verify its authenticity and integrity. The signature helps prevent malicious actors from modifying the cookie value, which can lead to security vulnerabilities and exploitation. Apache Hive’s servic...

com.holdenkarau:spark-testing-base_2.10 (>=2.1.3_0.10.0, <=2.1.3_0.14.0), com.holdenkarau:spark-testing-kafka-0_8_2.10 (>=2.1.3_0.12.0, <=2.1.3_0.14.0) +12 more potentially affected by CVE-2018-17190 via org.apache.spark:spark-core_2.10 (2.1.3)

org.apache.spark:spark-core2.10 MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - com.holdenkarau:spark-testing-base2.10 =2.1.30.10.0, =2.1.30.12.0, =2.1.4, =2.1.9 Source cves:...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (1.1.0-alpha1), com.datastax.spark:spark-cassandra-connector-embedded_2.10 (1.1.0-alpha1) +23 more potentially affected by CVE-2017-12612 via org.apache.spark:spark-core_2.10 (1.0.2)

org.apache.spark:spark-core2.10 MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 1.1.0-alpha1 -...