Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

spark-sc212-jdk17-py311 package may let attackers execute code

published 1 month ago
Summary

The spark-sc212-jdk17-py311 software, which includes the Netty network library, contains a flaw that could allow a remote attacker to run their own code on your system. This could lead to unauthorized actions, data loss, or service disruption. Update to the latest version of the package as soon as it is available, or apply any vendor‑provided patches to mitigate the risk.

What to do
  • Update cleanstart spark-sc212-jdk17-py311 to version 3.4.4-r1.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart spark-sc212-jdk17-py311 < 3.4.4-r1
Fix: upgrade to 3.4.4-r1
Original advisory text
Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Timeline
Published29 Sep 2026
Updated29 Sep 2026
First seen29 Sep 2026
Sources
Track software like this
Free during beta