CGA-m23v-94fg-4q89

Published

Last updated

Package

spark-3.5

Repository

Chainguard

Latest Update

Fix not planned

Aliases

Severity

7.1

High

CVSS CVSS_V3

Status

Fix not planned

Impact

This relates to guava v30.1.1-jre, which is included by the shaded JARs hadoop-shaded-guava-1.1.1.jar and hadoop-client-runtime-3.3.6.jar.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™