CGA-h224-hgr7-998g

Published

Last updated

Package

tez

RepositoryWolfi

Latest Update

Fixed

Fixed Version

0.10.4-r6

Aliases

Severity

7.5

High

CVSS V3

Status

Fixed

Fixed version

0.10.4-r6

Status

Pending upstream fix

Impact

The protobuf-java transitive dependency shaded in JAR must be bumped to 3.25.5 in the upstream project Hadoop.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™