dhi.io/spark
Spark 4.0.x (Scala 2.13.x, Java 21.x, Python 3.13.x) (python, fips)
4.0-debian-python-fips, 4.0-debian13-python-fips, 4.0-python-fips, 4.0.4-debian-python-fips, 4.0.4-debian13-python-fips, 4.0.4-python-fips
sha256:abbce329745c7c8ee0ed12c51059c6b5144a4dbca28d8c7dc7e03a8c20350e71
Manifest digest:sha256:7d270c0f3038ff522fe2e05b8d12fce45817b2f5e26aec6381f166100df26cce
| CVE | Severity | Package | Fix version | EPSS % | Last detected | Status |
|---|---|---|---|---|---|---|
| CVE-2026-97689 | 8.9h | pkg:pypi/[email protected] | 2.8.0 | 0.26853% | 1 month ago | Under investigation |
| CVE-2026-10050 | 8.7h | pkg:maven/org.eclipse.jetty/[email protected] | 11.0.31 | 0.50312% | 3 months ago | Under investigation |
| CVE-2026-102554 | 8.2h | pkg:maven/com.google.guava/[email protected] | 33.7.2 | 0.28857% | 6 days ago | - |
| CVE-2026-102554 | 8.2h | pkg:maven/com.google.guava/[email protected] | 33.7.2 | 0.28857% | 6 days ago | - |
| CVE-2026-97687 | 7.6h | pkg:pypi/[email protected] | 2.8.0 | 0.10658% | 1 month ago | Under investigation |
| CVE-2026-93451 | 7.5h | pkg:maven/org.xerial.snappy/[email protected] | 1.1.10.9 | 0.22293% | 6 days ago | - |
| CVE-2026-108106 | 7.5h | pkg:maven/org.xerial.snappy/[email protected] | 1.1.10.9 | 0.31081% | 6 days ago | - |
| CVE-2026-114613 | 7.5h | pkg:pypi/[email protected] | 1.2.3 | 0.4561% | 6 days ago | - |
| CVE-2026-2332 | 7.4h | pkg:maven/org.eclipse.jetty/[email protected] | 11.0.29 | 0.70538% | 3 months ago | Under investigation |
| CVE-2026-2332 | 7.4h | pkg:maven/org.eclipse.jetty/[email protected] | 9.4.60 | 0.70538% | 3 months ago | Under investigation |
| CVE-2026-97688 | 6.9m | pkg:pypi/[email protected] | 2.8.0 | 0.21778% | 1 month ago | Under investigation |
| CVE-2025-48924 | 6.5m | pkg:maven/commons-lang/[email protected] | - | 0.85534% | 1 year ago | Under investigation |
| CVE-2024-6763 | 6.3m | pkg:maven/org.eclipse.jetty/[email protected] | 12.0.12 | 0.61708% | 2 years ago | Under investigation |
| CVE-2024-6763 | 6.3m | pkg:maven/org.eclipse.jetty/[email protected] | 12.0.12 | 0.61708% | 2 years ago | Under investigation |
| CVE-2026-19672 | 6.3m | pkg:deb/debian/[email protected]?arch=amd64&os_distro=trixie&os_name=debian&os_version=13 | - | 0.40794% | 3 months ago | - |
| CVE-2026-116590 | 5.9m | pkg:maven/org.xerial.snappy/[email protected] | 1.1.10.9 | 0.34995% | 6 days ago | - |
| CVE-2024-29869 | 5.5m | pkg:maven/org.apache.hive/[email protected] | 4.0.1 | 0.22221% | 2 years ago | Under investigation |
| CVE-2026-6790 | 5.3m | pkg:maven/org.eclipse.jetty/[email protected] | - | 0.23917% | 3 months ago | Under investigation |
| CVE-2026-116566 | 5.3m | pkg:deb/debian/[email protected]?arch=amd64&os_distro=trixie&os_name=debian&os_version=13 | - | 0.17689% | 4 days ago | - |
| CVE-2025-11143 | 3.7l | pkg:maven/org.eclipse.jetty/[email protected] | - | 0.07794% | 8 months ago | Under investigation |
| CVE-2025-11143 | 3.7l | pkg:maven/org.eclipse.jetty/[email protected] | - | 0.07794% | 8 months ago | Under investigation |
| CVE-2026-103995 | 2l | pkg:deb/debian/[email protected]?arch=amd64&os_distro=trixie&os_name=debian&os_version=13 | - | 0.29772% | 6 days ago | - |
| GHSA-xmj3-9gf7-h52w | 1l | pkg:pypi/[email protected] | 84.1.0 | - | 10 days ago | - |