Apache Linkis DatasourceManager module has deserialization vulnerability
Maven org.apache.linkis:linkis-datasource · Upgrade to 1.3.2 or later · < 1.3.2 · CVE-2023-29216 · GHSA-rrhf-32rq-f28h
Published open-source security advisories, matched to the exact versions you run.
Run in a terminal
claude mcp add --scope user --transport http patchnext https://mcp.patchnext.com && claude mcp login patchnext
Your browser opens: sign in and choose what the agent may read.
Then ask: What do I need to patch on this machine?
Maven org.apache.linkis:linkis-datasource · Upgrade to 1.3.2 or later · < 1.3.2 · CVE-2023-29216 · GHSA-rrhf-32rq-f28h
Maven org.apache.linkis:linkis-engineconn · Upgrade to 1.3.2 or later · < 1.3.2 · CVE-2023-29215 · GHSA-qm2h-m799-86rc
npm vm2 · Upgrade to 3.9.15 or later · < 3.9.15 · CVE-2023-29017 · GHSA-7jxr-cg7f-gpgv · amended
npm @sveltejs/kit · Upgrade to 1.15.2 or later · < 1.15.2 · CVE-2023-29008 · GHSA-gv7g-x59x-wf8f · amended
PyPI apache-airflow-providers-apache-spark · Upgrade to 4.0.1 or later · < 4.0.1 · CVE-2023-28710 · GHSA-ffj9-4crc-q7wf · amended
PyPI apache-airflow-providers-apache-drill +1 · Upgrade all 2 to 2.3.2 or later · < 2.3.2 · CVE-2023-28707 · GHSA-85pf-r4c7-3j9r · amended
PyPI apache-airflow-providers-apache-hive · Upgrade to 6.0.0 or later · < 6.0.0 · CVE-2023-28706 · GHSA-5cvg-9pp5-mxcj · amended
Go github.com/hashicorp/nomad · Upgrade to 1.5.3 or later · >= 1.5.0, <= 1.5.2 · CVE-2023-1782 · GHSA-f8r8-h93m-mj77
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1886 · GHSA-4cr4-x82x-hwm9
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1887 · GHSA-gx43-fqrx-6fcw
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1758 · GHSA-3j93-7rf7-p7m6
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1880 · GHSA-m8q9-7v2f-qjx9
Packagist microweber/microweber · Upgrade to 1.3.3 or later · < 1.3.3 · CVE-2023-1881 · GHSA-hhjm-mpmf-cxg9
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1882 · GHSA-jph3-3j24-pg3j
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1878 · GHSA-gcmq-7652-x98j
Packagist thorsten/phpmyfaq · Upgrade to 3.1.12 or later · < 3.1.12 · CVE-2023-1757 · GHSA-jvjx-qqh7-6x6c
Maven com.baomidou:mybatis-plus · Upgrade to 3.5.3.1 or later · < 3.5.3.1 · CVE-2023-25330 · GHSA-32qq-m9fh-f74w
npm @sveltejs/kit · Upgrade to 1.15.1 or later · < 1.15.1 · CVE-2023-29003 · GHSA-5p75-vc5g-8rv2 · amended
Go github.com/docker/docker · Upgrade to 23.0.3 or 20.10.24 by release line · >= 1.12.0, < 20.10.24; >= 23.0.0, < 23.0.3 · CVE-2023-28840 · GHSA-232p-vwff-86mp
Maven net.mingsoft:ms-mcms · Upgrade to 5.1 or later · < 5.1 · CVE-2020-20913 · GHSA-hx8p-9m48-g76r
PyPI admesh · Upgrade to 0.98.5 or later · < 0.98.5 · CVE-2022-38072 · GHSA-v5hv-4pw3-q6h9 · amended
PyPI wagtail · Upgrade to 4.2.2 or 4.1.4 by release line · >= 1.5, < 4.1.4; >= 4.2, < 4.2.2 · CVE-2023-28836 · GHSA-5286-f2rf-35c2 · amended
Maven org.apache.james:javax-mail-extension · Upgrade to 3.7.4 or later · < 3.7.4 · CVE-2023-26269 · GHSA-w7r6-v4j7-h94w
Maven org.jenkins-ci.plugins:jacoco · Upgrade to 3.3.2.1 or later · < 3.3.2.1 · CVE-2023-28669 · GHSA-xj29-gfww-j67g
Maven com.paul8620.jenkins.plugins:pipeline-aggregator-view · Upgrade to 1.14 or later · < 1.14 · CVE-2023-28670 · GHSA-v27q-87jf-j9cr
A vendor fix does not resolve your finding until you verify it in your own systems.
Security reports that are not matched to your stack.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.
Listed as news: the source report lacks affected versions, a fix, or verified evidence.