spark-operator-fipspackaged by Chainguard
packaged by Chainguard
Last changed
Request a free trial
Contact our team to test out this image for free. Please also indicate any other images you would like to evaluate.
Tag:
Severity:All
Expand | CVE ID | Severity | Package | Version | Last detected |
|---|---|---|---|---|---|
CVE-2024-47561 | Critical | avro | 1.7.7 | ||
CVE-2021-22569 | High | protobuf-java | 3.7.1 | ||
CVE-2025-67721 | High | aircompressor | 0.27 | ||
CVE-2019-0205 | High | libthrift | 0.12.0 | ||
CVE-2024-47554 | High | commons-io | 2.8.0 | ||
CVE-2023-39410 | High | avro | 1.7.7 | ||
CVE-2018-1330 | High | mesos | 1.4.3 | ||
CVE-2020-13949 | High | libthrift | 0.12.0 | ||
CVE-2021-22569 | High | protobuf-java | 3.3.0 | ||
CVE-2022-3509 | High | protobuf-java | 3.3.0 | ||
CVE-2025-52999 | High | jackson-core | 2.13.4 | ||
CVE-2022-3509 | High | protobuf-java | 3.7.1 | ||
CVE-2025-52999 | High | jackson-core | 2.12.7 | ||
CVE-2024-7254 | High | protobuf-java | 3.3.0 | ||
CVE-2024-7254 | High | protobuf-java | 3.7.1 | ||
CVE-2022-3510 | High | protobuf-java | 3.7.1 | ||
CVE-2021-0341 | High | okhttp | 3.12.12 | ||
CVE-2024-25638 | High | dnsjava | 2.1.7 | ||
CVE-2022-3510 | High | protobuf-java | 3.3.0 | ||
CVE-2025-48734 | High | commons-beanutils | 1.9.4 | ||
CVE-2025-48924 | Medium | commons-lang | 2.6 | ||
CVE-2025-49128 | Medium | jackson-core | 2.12.7 | ||
CVE-2025-15366 | Medium | python-3.14 | 3.14.4-r1 | ||
CVE-2024-25710 | Medium | commons-compress | 1.21 | ||
GHSA-72hv-8253-57qq | Medium | jackson-core | 2.12.7 | ||
GHSA-72hv-8253-57qq | Medium | jackson-core | 2.13.4 | ||
CVE-2024-6763 | Medium | jetty-http | 9.4.56.v20240826 | ||
CVE-2022-3171 | Medium | protobuf-java | 3.3.0 | ||
CVE-2025-12194 | Medium | bc-fips | 2.1.1 | ||
CVE-2024-6763 | Medium | jetty-http | 9.4.57.v20241219 | ||
CVE-2022-3171 | Medium | protobuf-java | 3.7.1 | ||
CVE-2023-2976 | Medium | guava | 30.1.1-jre | ||
CVE-2023-2976 | Medium | guava | 30.1.1-jre | ||
CVE-2026-34480 | Medium | log4j-core | 2.25.3 | ||
CVE-2026-34480 | Medium | log4j-core | 2.25.3 | ||
CVE-2025-15367 | Medium | python-3.14 | 3.14.4-r1 | ||
CVE-2026-1502 | Medium | python-3.14 | 3.14.4-r1 | ||
CVE-2025-48924 | Medium | commons-lang3 | 3.12.0 | ||
CVE-2024-29133 | Medium | commons-configuration2 | 2.8.0 | ||
CVE-2024-29131 | Medium | commons-configuration2 | 2.8.0 | ||
CVE-2025-53864 | Medium | nimbus-jose-jwt | 9.37.2 | ||
CVE-2025-48924 | Medium | commons-lang3 | 3.12.0 | ||
CVE-2025-48924 | Medium | commons-lang3 | 3.12.0 | ||
CVE-2024-23953 | Medium | hive-llap-common | 2.3.9 | ||
CVE-2024-26308 | Medium | commons-compress | 1.21 | ||
CVE-2025-12781 | Medium | python-3.14 | 3.14.4-r1 | ||
CVE-2024-29869 | Medium | hive-exec | 2.3.9 | ||
CVE-2024-23454 | Low | hadoop-common | 3.3.6-cg0 | ||
CVE-2025-11143 | Low | jetty-http | 9.4.56.v20240826 | ||
CVE-2025-11143 | Low | jetty-http | 9.4.57.v20241219 | ||
CVE-2020-8908 | Low | guava | 30.1.1-jre | ||
CVE-2020-8908 | Low | guava | 30.1.1-jre |
Last updated:
The trusted source for open source
Talk to an expertProduct
Customers
© 2026 Chainguard, Inc. All Rights Reserved.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.
Chainguard® and the Chainguard logo are registered trademarks of Chainguard, Inc. in the United States and/or other countries.
The other respective trademarks mentioned on this page are owned by the respective companies and use of them does not imply any affiliation or endorsement.