CGA-q6j4-cq6q-vp7v

Published

Last updated

Package

spark-3.5

Repository

Chainguard

Latest Update

Pending upstream fix

Aliases

Severity

Unknown

Status

Pending upstream fix

Impact

commons-lang 2.6 has no patched version available. Upstream must upgrade to commons-lang3 3.18.0 or later to address this vulnerability.

Status

Under investigation

Advisories are based on vulnerability information provided by Grype from Anchore. Learn how Chainguard creates security advisories.

Safe Source for Open Source™