Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.hadoop/hadoop-common@3.3.6
purl pkg:maven/org.apache.hadoop/hadoop-common@3.3.6
Next non-vulnerable version 3.4.0
Latest non-vulnerable version 3.4.0
Risk 2.8
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-3fz1-e6n6-rfh6
Aliases:
CVE-2024-23454
GHSA-f5fw-25gw-5m92
Apache Hadoop: Temporary File Local Information Disclosure Apache Hadoop’s `RunJar.run()` does not set permissions for temporary directory by default. If sensitive data will be present in this file, all the other local users may be able to view the content. This is because, on unix-like systems, the system temporary directory is shared between all local users. As such, files written in this directory, without setting the correct posix permissions explicitly, may be viewable by all other local users.
3.4.0
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T23:09:35.523958+00:00 GitLab Importer Affected by VCID-3fz1-e6n6-rfh6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hadoop/hadoop-common/CVE-2024-23454.yml 38.4.0
2026-04-12T00:27:50.141444+00:00 GitLab Importer Affected by VCID-3fz1-e6n6-rfh6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hadoop/hadoop-common/CVE-2024-23454.yml 38.3.0
2026-04-03T00:35:32.958451+00:00 GitLab Importer Affected by VCID-3fz1-e6n6-rfh6 https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.hadoop/hadoop-common/CVE-2024-23454.yml 38.1.0