Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.8

spark-sc212-jdk17-py311 may expose network communication

published 1 month ago
Summary

The spark-sc212-jdk17-py311 software includes the Netty networking library, which has a security weakness that could let an attacker interfere with or read data moving through the system. This could lead to unauthorized access or data manipulation. Update to the latest version of the package as soon as possible or apply any patches provided by the supplier to close the gap.

What to do
  • Update cleanstart spark-sc212-jdk17-py311 to version 3.4.4-r1.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart spark-sc212-jdk17-py311 < 3.4.4-r1
Fix: upgrade to 3.4.4-r1
Original advisory text
Netty is an asynchronous, event-driven network application framework
Security vulnerability affects the spark-sc212-jdk17-py311 package. Netty is an asynchronous, event-driven network application framework.
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.8 Critical
Timeline
Published29 Sep 2026
Updated29 Sep 2026
First seen29 Sep 2026
Sources
Track software like this
Free during beta