Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
GHSA-p953-3j66-hg45
  • Maven/org.apache.hive:hive-llap-common
 Apache Hive vulnerable to Observable Timing Discrepancy and Authentication Bypass by Spoofing 28 Jan 2025
  • Fix available
  • Severity - 6.5 (Medium)
CLEANSTART-2026-SY76687
  • CleanStart/spark-sc212-jdk17-py311
  • CleanStart/spark-sc213-jdk17-py312
 Security fix for ghsa-p953-3j66-hg45 applied in: spark-sc212-jdk17-py311 3.4.4-r0, spark-sc213-jdk17-py312 3.5.8-r0 18 Sep
  • Fix available
CGA-wxmp-8gvp-3822
  • Chainguard/ranger
 See record for full details 20 Aug
  • No fix available
  • Severity - 6.5 (Medium)
CGA-7x24-3c49-gjw3
  • Chainguard/ranger
 See record for full details 20 Aug
  • No fix available
  • Severity - 6.5 (Medium)
MINI-3fmj-m98c-m2ff
  • MinimOS/spark-3.5-scala-2.12
  • MinimOS/spark-3.5-scala-2.12-python
  • MinimOS/spark-3.5-scala-2.12-python-r
  • MinimOS/spark-3.5-scala-2.13
  • MinimOS/spark-3.5-scala-2.13-python
  • ... 1 more
 See record for full details 17 Nov 2025
  • No fix available
CGA-7wx9-59jc-87v3
  • Chainguard/spark-3.5-scala-2.13
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-4c9h-3644-7r27
  • Chainguard/spark-3.5-scala-2.12
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-9xgc-ch6g-wgfq
  • Chainguard/spark-3.5-scala-2.12
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-3775-jr8f-28gp
  • Chainguard/spark-3.5-scala-2.13
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-x6q8-j3r2-4jwc
  • Chainguard/spark-fips-3.5-scala-2.13
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-cr55-f9r6-72hx
  • Chainguard/spark-fips-3.5-scala-2.12
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-m27m-gw56-f696
  • Chainguard/spark-fips-3.5-scala-2.13
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CGA-vp6p-xvvm-c62r
  • Chainguard/spark-fips-3.5-scala-2.12
 See record for full details 30 Oct 2025
  • No fix available
  • Severity - 6.5 (Medium)
CVE-2024-23953
  • github.com/apache/hive
 Apache Hive: Timing Attack Against Signature in LLAP util 28 Jan 2025
  • Fix available
  • Severity - 6.5 (Medium)