Fixed Common Vulnerabilities and Exposures in Cloudera Manager 7.13.3
Common Vulnerabilities and Exposures (CVE) that are fixed in Cloudera Manager 7.13.3.
Cloudera Manager 7.13.3.0
| CVEs | Package Name |
|---|---|
| CVE-2025-68121 | stdlib |
| CVE-2026-33701 | io.opentelemetry.javaagent:opentelemetry-javaagent |
| CVE-2026-27459 | pyOpenSSL |
| CVE-2026-27727 | com.mchange:mchange-commons-java |
| CVE-2026-33454 | org.apache.camel:camel-mail |
| CVE-2026-33186 | google.golang.org/grpc |
| CVE-2025-14813 | org.bouncycastle:bcprov-jdk18on |
| CVE-2025-47273 | setuptools |
| CVE-2026-0603 | org.hibernate:hibernate-core |
| CVE-2026-33997 | github.com/docker/docker |
| CVE-2026-34040 | github.com/docker/docker |
| CVE-2026-3505 | org.bouncycastle:bcpg-jdk18on |
| CVE-2025-66471 | urllib3 |
| CVE-2026-50645 | org.apache.cxf:cxf-core |
| CVE-2026-39836 | stdlib |
| CVE-2026-32283 | stdlib |
| CVE-2025-7962 | com.sun.mail:jakarta.mail |
| CVE-2026-21441 | urllib3 |
| CVE-2026-41205 | Mako |
| CVE-2025-68156 | github.com/expr-lang/expr |
| CVE-2026-33811 | stdlib |
| CVE-2026-42198 | org.postgresql:postgresql |
| CVE-2026-32287 | github.com/antchfx/xpath |
| CVE-2026-39820 | stdlib |
| CVE-2026-34480 | org.apache.logging.log4j:log4j-core |
| CVE-2026-32281 | stdlib |
| CVE-2026-34478 | org.apache.logging.log4j:log4j-core |
| CVE-2025-66418 | urllib3 |
| CVE-2026-42306 | github.com/docker/docker |
| CVE-2026-39883 | go.opentelemetry.io/otel/sdk |
| CVE-2024-45338 | golang.org/x/net |
| CVE-2026-25679 | stdlib |
| CVE-2026-69249 | cryptography |
| CVE-2026-41567 | github.com/docker/docker |
| CVE-2026-55153 | com.mchange:mchange-commons-java |
| CVE-2026-41720 | org.springframework.ldap:spring-ldap-core |
| CVE-2026-27145 | stdlib |
| CVE-2024-34156 | stdlib |
| CVE-2025-61729 | stdlib |
| CVE-2026-44307 | Mako |
| CVE-2026-42504 | stdlib |
| CVE-2026-27830 | com.mchange:c3p0 |
| CVE-2026-24051 | go.opentelemetry.io/otel/sdk |
| CVE-2025-47913 | golang.org/x/crypto |
| CVE-2026-45300 | org.asynchttpclient:async-http-client |
| GHSA-537c-gmf6-5ccf | cryptography |
| CVE-2024-45337 | golang.org/x/crypto |
| CVE-2026-32280 | stdlib |
| CVE-2026-42499 | stdlib |
| CVE-2025-61726 | stdlib |
| CVE-2026-39822 | stdlib |
| CVE-2026-68494 | com.fasterxml.jackson.core:jackson-core |
| CVE-2025-22869 | golang.org/x/crypto |
| CVE-2026-26007 | cryptography |
| CVE-2026-32282 | stdlib |
| CVE-2025-50181 | urllib3 |
| CVE-2025-50182 | urllib3 |
| CVE-2026-32289 | stdlib |
| CVE-2026-49844 | org.apache.logging.log4j:log4j-api |
| CVE-2026-34477 | org.apache.logging.log4j:log4j-core |
| CVE-2025-53864 | com.nimbusds:nimbus-jose-jwt |
| CVE-2026-32288 | stdlib |
| CVE-2026-34073 | cryptography |
| CVE-2026-44431 | urllib3 |
| CVE-2025-58190 | golang.org/x/net |
| CVE-2025-47911 | golang.org/x/net |
| CVE-2024-47081 | requests |
| CVE-2026-27448 | pyOpenSSL |
| CVE-2025-54388 | github.com/docker/docker |
| CVE-2025-58188 | stdlib |
| CVE-2026-42507 | stdlib |
| CVE-2025-47906 | stdlib |
| CVE-2026-5588 | org.bouncycastle:bcpkix-jdk18on |
| CVE-2025-61730 | stdlib |
| CVE-2026-59230 | org.apache.camel:camel-mail |
| CVE-2025-58185 | stdlib |
| CVE-2025-47912 | stdlib |
| CVE-2025-61724 | stdlib |
| CVE-2026-27142 | stdlib |
| CVE-2026-18401 | com.fasterxml.jackson.core:jackson-core |
| CVE-2024-45336 | stdlib |
| CVE-2025-71405 | github.com/go-chi/chi/v5 |
| CVE-2024-34155 | stdlib |
| CVE-2026-39823 | stdlib |
| CVE-2025-47914 | golang.org/x/crypto |
| CVE-2026-40490 | org.asynchttpclient:async-http-client |
| CVE-2025-22870 | golang.org/x/net; stdlib |
| CVE-2025-0913 | stdlib |
| CVE-2026-39826 | stdlib |
| CVE-2024-34158 | stdlib |
| CVE-2025-22866 | stdlib |
| CVE-2025-47907 | stdlib |
| CVE-2025-61727 | stdlib |
| CVE-2026-39882 | go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp; go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp; go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp |
| CVE-2025-22872 | golang.org/x/net |
| CVE-2026-42505 | stdlib |
| CVE-2025-22871 | stdlib |
| CVE-2026-55688 | org.asynchttpclient:async-http-client |
| CVE-2026-0636 | org.bouncycastle:bcprov-jdk18on |
| CVE-2025-58187 | stdlib |
| CVE-2025-58189 | stdlib |
| CVE-2026-39825 | stdlib |
| CVE-2025-58183 | stdlib |
| GHSA-h4gh-qq45-vh27 | cryptography |
| CVE-2025-22873 | stdlib |
| CVE-2025-8869 | pip |
| CVE-2025-61723 | stdlib |
| CVE-2026-41568 | github.com/docker/docker |
| CVE-2026-2303 | go.mongodb.org/mongo-driver |
| CVE-2025-58181 | golang.org/x/crypto |
| CVE-2025-61728 | stdlib |
| CVE-2025-4673 | stdlib |
| CVE-2025-61725 | stdlib |
| CVE-2025-58186 | stdlib |
| CVE-2024-45341 | stdlib |
| CVE-2024-12797 | cryptography |
| CVE-2026-27139 | stdlib |
| CVE-2026-69248 | cryptography |
| CVE-2025-66566 | at.yawk.lz4:lz4-java |
