{"action":"Upgrade org.apache.hadoop:hadoop-common to 2.10.2 (2.10.x), 3.2.3 (3.2.x) or 3.3.2 (3.3.x) or later.","affected":[{"fixed":"3.3.2","introduced":"3.3.0"},{"fixed":"3.2.3","introduced":"3.0.0"},{"fixed":"2.10.2","introduced":"0"}],"component":"org.apache.hadoop:hadoop-common","cve_ids":["CVE-2021-37404"],"ecosystem":"Maven","epss":0.02993,"exploited":false,"fixed_versions":["3.3.2","3.2.3","2.10.2"],"ghsa_id":"GHSA-rmpj-7c96-mrg8","id":"tcs_01M5N9C3ASYGKYGNF0TKGPZT95","modified_at":"2024-02-22T05:34:28.037449Z","published_at":"2022-06-14T00:00:37Z","references":["https://osv.dev/vulnerability/GHSA-rmpj-7c96-mrg8","https://nvd.nist.gov/vuln/detail/CVE-2021-37404","https://github.com/apache/hadoop","https://lists.apache.org/thread/2h56ztcj3ojc66qzf1nno88vjw9vd4wo","https://security.netapp.com/advisory/ntap-20220715-0007"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-rmpj-7c96-mrg8","url":"https://osv.dev/vulnerability/GHSA-rmpj-7c96-mrg8"}],"summary":"Apache Hadoop heap overflow before v2.10.2, v3.2.3, v3.3.2"}