io.dataease:common (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package io.dataease:common, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2024-46997 — CVSS 9.8 (critical): DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, an attacker can achieve remote command execution by…
• CVE-2024-46985 — CVSS 7.5 (high): DataEase is an open source data visualization analysis tool. Prior to version 2.10.1, there is an XML external entity injection…