org.spark-project:spark-bagel_2.9.2 (>=0.5.1, <=0.5.2), org.spark-project:spark-core_2.9.2 (>=0.5.1, <=0.5.2) +2 more potentially affected by CVE-2017-9790 via org.apache.mesos:mesos (0.9.0-incubating)

org.apache.mesos:mesos MAVEN version 0.9.0-incubating is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.mesos:mesos and may be impacted: - org.spark-project:spark-bagel2.9.2 =0.5.1, =0.5.1, =0.5.1, =0.5.1, =0.5.2 Source cves: CVE-2017-9790...