/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-cv5r-733p-qm23

Published

Last updated

https://images.chainguard.dev/security/CGA-cv5r-733p-qm23
Package

spark-fips-3.5

Repository

Chainguard

Latest Update
Pending upstream fix
Aliases
  • CVE-2022-36944
  • GHSA-8qv5-68g4-248j

Severity

9.8

Critical

CVSS V3

References

  • https://nvd.nist.gov/vuln/detail/CVE-2022-36944

Updates

Status

Pending upstream fix

Impact

This relates to Scala 2.13.8. 2.13.9 addressed this, but requires extensive changes be made to Spark to adopt due to the changes introducing compatibility with Scala 3

Status

Under investigation


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing