/
DirectorySecurity AdvisoriesPricing
Sign in
Security Advisories

CGA-ww3c-v2pw-2hr3

Published

Last updated

https://images.chainguard.dev/security/CGA-ww3c-v2pw-2hr3
Package

flyway

RepositoryWolfi
Latest Update
Pending upstream fix
Aliases
  • CVE-2024-47535
  • GHSA-xq3w-v528-46rv

Severity

Unknown

References

  • https://nvd.nist.gov/vuln/detail/CVE-2024-47535

Updates

Status

Pending upstream fix

Impact

netty-common-4.1.86.Final.jar is not part of upstream repo. It is a transitive dependendcy of /flyway/drivers/databricks-jdbc-2.6.40.jar. This is not easily fixed as databricks-jdbc is closed source.

Status

Under investigation

Status

Pending upstream fix

Impact

netty-common-4.1.86.Final.jar is not part of upstream repo. It is a transitive dependendcy of /flyway/drivers/databricks-jdbc-2.6.40.jar. This is not easily fixed as databricks-jdbc is closed source.


Safe Source for Open Sourceâ„¢
Contact us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Product

Chainguard ContainersChainguard LibrariesChainguard VMsIntegrationsPricing