Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
3.7
CGA-gj4w-9rp8-643f
published 7 months ago
Summary
No summary available.
What to do
- Update chainguard spark-fips-3.5-scala-2.12 to version 3.5.8-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Chainguard | chainguard | spark-fips-3.5-scala-2.12 |
< 3.5.8-r0 Fix: upgrade to 3.5.8-r0
|
Original advisory text
CGA-gj4w-9rp8-643f
References
- https://security.netapp.com/advisory/ntap-20250306-0005/ Vendor Advisory
- https://github.com/jetty/jetty.project/pull/12012 Patch
- https://repo.maven.apache.org/maven2/ URL
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/6xxx/CVE-2024-6763.j... Vendor Advisory
- https://github.com/jetty/jetty.project/security/advisories/GHSA-qh8g-58pp-2wxh Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2024-6763 Vendor Advisory
- https://gitlab.eclipse.org/security/cve-assignement/-/issues/25 Third Party Advisory
- https://github.com/jetty/jetty.project Product
Internet-facing
14 days
Internal
60 days
- Not known to be exploited
- Can be exploited automatically (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published1 Apr 2026
Updated5 Nov 2026
First seen5 Nov 2026
Sources
CGA-gj4w-9rp8-643f · OSV
Track software like this
Free during beta