{"action":"Upgrade org.apache.hadoop:hadoop-common to 2.8.1 (2.x) or 3.0.0-alpha3 (3.x) or later.","affected":[{"fixed":"2.8.1","introduced":"0"},{"fixed":"3.0.0-alpha3","introduced":"3.0.0-alpha1"}],"component":"org.apache.hadoop:hadoop-common","cve_ids":["CVE-2017-7669"],"ecosystem":"Maven","epss":0.01795,"exploited":false,"fixed_versions":["2.8.1","3.0.0-alpha3"],"ghsa_id":"GHSA-h24p-qwf4-84q8","id":"tcs_01M5N8ZBFEQ9YE62V0JAMAEEZG","modified_at":"2023-11-08T03:59:26.035253Z","published_at":"2022-05-17T02:41:57Z","references":["https://osv.dev/vulnerability/GHSA-h24p-qwf4-84q8","https://nvd.nist.gov/vuln/detail/CVE-2017-7669","https://mail-archives.apache.org/mod_mbox/hadoop-user/201706.mbox/%3C4A2FDA56-491B-4C2A-915F-C9D4A4BDB92A%40apache.org%3E","http://www.securityfocus.com/bid/98795"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-h24p-qwf4-84q8","url":"https://osv.dev/vulnerability/GHSA-h24p-qwf4-84q8"}],"summary":"Apache Hadoop's LinuxContainerExecutor runs docker commands as root with insufficient input validation"}