Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
CGA-qrrr-f67h-6qrg
published 2 days ago
Summary
No summary available.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | spark-3.5-scala-2.12 | All versions |
Original advisory text
CGA-qrrr-f67h-6qrg
References
- https://lists.debian.org/debian-lts-announce/2023/04/msg00019.html URL
- https://cloud.google.com/support/bulletins#gcp-2022-001 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/01/12/4 Vendor Advisory
- http://www.openwall.com/lists/oss-security/2022/01/12/7 Vendor Advisory
- https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=39330 Third Party Advisory
- https://www.oracle.com/security-alerts/cpuapr2022.html Patch
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published2 Nov 2026
Updated2 Nov 2026
First seen2 Nov 2026
Sources
CGA-qrrr-f67h-6qrg · OSV
Track software like this
Free during beta