CGA-5497-j236-gpxj
- Source
- https://images.chainguard.dev/security/CGA-5497-j236-gpxj
- Import Source
- https://advisories.cgr.dev/chainguard/v3/osv/CGA-5497-j236-gpxj.json
- JSON Data
- https://api.osv.dev/v1/vulns/CGA-5497-j236-gpxj
- Upstream
- Published
- 2026-01-02T11:39:29Z
- Modified
- 2026-09-07T01:24:58Z
- Severity
-
- 5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator
- Summary
- [none]
- Details
- References
-
- https://lists.apache.org/thread/h27ohpyrqf9w1m3c0tqr7x8jg59rcrv6
- https://issues.apache.org/jira/browse/HIVE-28134
- https://github.com/apache/hive/commit/20106e254527f7d71b2e34455c4322e14950c620
- https://github.com/apache/hive
- http://www.openwall.com/lists/oss-security/2025/01/28/4
- https://repo.maven.apache.org/maven2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/29xxx/CVE-2024-29869.json
- https://nvd.nist.gov/vuln/detail/CVE-2024-29869
Affected packages
Chainguard / spark-4.1-scala-2.13
Package
- Name
- spark-4.1-scala-2.13
- Purl
- pkg:apk/chainguard/spark-4.1-scala-2.13?arch=aarch64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"components": [
{
"component_location": "/usr/lib/spark/jars/hive-exec-2.3.10-core.jar",
"component_name": "hive-exec",
"component_purl": "pkg:maven/hive-exec@2.3.10",
"component_type": "java-archive",
"component_version": "2.3.10",
"latest_event_status": "pending_upstream_fix",
"latest_event_timestamp": "2026-01-06T19:00:00Z"
}
]
}
Wolfi / spark-4.1-scala-2.13
Package
- Name
- spark-4.1-scala-2.13
- Purl
- pkg:apk/wolfi/spark-4.1-scala-2.13?arch=aarch64
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0 Unknown introduced version / All previous versions are affected
Ecosystem specific
{
"components": [
{
"component_location": "/usr/lib/spark/jars/hive-exec-2.3.10-core.jar",
"component_name": "hive-exec",
"component_purl": "pkg:maven/hive-exec@2.3.10",
"component_type": "java-archive",
"component_version": "2.3.10",
"latest_event_status": "pending_upstream_fix",
"latest_event_timestamp": "2026-01-06T19:00:00Z"
}
]
}