Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

Spark‑sc212‑jdk17‑py311 may allow unauthorized code execution

published 1 month ago
Summary

The Spark‑sc212‑jdk17‑py311 package uses the Netty networking library, which contains a security weakness that could let an attacker run code on your system. This could lead to data theft or system disruption. Update the package to the latest version or apply the vendor’s recommended patch as soon as possible.

What to do
  • Update cleanstart spark-sc212-jdk17-py311 to version 3.4.4-r1.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart spark-sc212-jdk17-py311 < 3.4.4-r1
Fix: upgrade to 3.4.4-r1
Original advisory text
Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Timeline
Published29 Sep 2026
Updated29 Sep 2026
First seen29 Sep 2026
Sources
Track software like this
Free during beta