{"action":"Upgrade org.apache.hadoop:hadoop-yarn-project to 3.3.5 or later.","affected":[{"fixed":"3.3.5","introduced":"3.3.1"}],"component":"org.apache.hadoop:hadoop-yarn-project","cve_ids":["CVE-2023-26031"],"ecosystem":"Maven","epss":0.02089,"exploited":false,"fixed_versions":["3.3.5"],"ghsa_id":"GHSA-94jh-j374-9r3j","id":"tcs_01M5N8P3ASPARBBZQA3DWNBGNN","modified_at":"2025-01-10T16:00:49.181412Z","published_at":"2023-11-16T09:30:24Z","references":["https://osv.dev/vulnerability/GHSA-94jh-j374-9r3j","https://nvd.nist.gov/vuln/detail/CVE-2023-26031","https://github.com/apache/hadoop/commit/10e7ca481c8cd0548d903d39d8581291e533bf12","https://github.com/apache/hadoop/commit/7d3c8ef6064efd132828765e52e961977aebbf47","https://github.com/apache/hadoop","https://hadoop.apache.org/cve_list.html","https://issues.apache.org/jira/browse/YARN-11441","https://lists.apache.org/thread/q9qpdlv952gb4kphpndd5phvl7fkh71r","https://security.netapp.com/advisory/ntap-20240112-0001"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-94jh-j374-9r3j","url":"https://osv.dev/vulnerability/GHSA-94jh-j374-9r3j"}],"summary":"Apache Hadoop allows local user to gain root privileges"}