Skip to content
OpenAdvisories

Package · Wolfi

spark-4.1

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 6.5
    CVE-2025-67735

    Netty has a CRLF Injection vulnerability in io.netty.handler.codec.http.HttpRequestEncoder

    Netty is an asynchronous, event-driven network application framework. In versions prior to 4.1.129.Final and 4.2.8.Final, the `io.netty.handler.codec.http.HttpRequestEncoder` has a CRLF injection with the request URI when constructing a request. This leads to…

    netty netty druid thingsboard-tb-node Debian Ubuntu Wolfi Maven
  • Medium 5.8
    CVE-2025-53864

    Nimbus JOSE + JWT is vulnerable to DoS attacks when processing deeply nested JSON

    Connect2id Nimbus JOSE + JWT 10.0.x before 10.0.2 and 9.37.x before 9.37.4 allows a remote attacker to cause a denial of service via a deeply nested JSON object supplied in a JWT claim set, because of uncontrolled recursion. NOTE: this is independent of the G…

    Connect2id Nimbus JOSE+JWT druid tez Ubuntu Wolfi Maven
  • Medium 4.0
    CVE-2025-49128

    Jackson-core Vulnerable to Memory Disclosure via Source Snippet in JsonLocation

    Jackson-core contains core low-level incremental ("streaming") parser and generator abstractions used by Jackson Data Processor. Starting in version 2.0.0 and prior to version 2.13.0, a flaw in jackson-core's `JsonLocation._appendSourceDesc` method allows up …

    FasterXML jackson-core druid tez Debian Ubuntu Wolfi Maven