CVE-2025-58056 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, spark, akhq, wavefront-proxy, keycloak, localstack, sonarqube, druid, grpc-java-fips, keycloak-fips, neo4j, seata, wildfly, elasticsearch-fips, apache-pulsar, flyway, selenium, logstash, tez, strimzi-kafka-operator, zipkin, apache-hop-fips, spark-fips,...

GHSA-FGHV-69VJ-QJ49 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, spark, akhq, wavefront-proxy, keycloak, localstack, sonarqube, druid, grpc-java-fips, keycloak-fips, neo4j, seata, wildfly, elasticsearch-fips, apache-pulsar, flyway, selenium, logstash, tez, strimzi-kafka-operator, zipkin, apache-hop-fips, spark-fips,...

Malicious code in spark-webpack-react-app (npm)

The package spark-webpack-react-app was found to contain malicious code...

Malicious code in spark-browser-extension (npm)

The package spark-browser-extension was found to contain malicious code...

MAL-2025-43516 Malicious code in artillery-engine-spark (npm)

The package artillery-engine-spark was found to contain malicious code...

Malicious code in artillery-engine-spark (npm)

The package artillery-engine-spark was found to contain malicious code...

MAL-2025-46117 Malicious code in spark-webpack-react-app (npm)

The package spark-webpack-react-app was found to contain malicious code...

Malicious code in spark-nextjs-app (npm)

The package spark-nextjs-app was found to contain malicious code...

MAL-2025-46115 Malicious code in spark-browser-extension (npm)

The package spark-browser-extension was found to contain malicious code...

MAL-2025-46116 Malicious code in spark-nextjs-app (npm)

The package spark-nextjs-app was found to contain malicious code...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

Security Bulletin: Common vulnerabilities discovered in Spark2 executables released with Cloudera Observability on Premises with IBM Version 3.5.3

Summary Cloudera Observability on premises with IBM 3.5.3 ships with Spark 2 executables, however, the application runs on Spark 3. This security bulletin identifies a set of common vulnerabilities found in the Spark 2 libraries. Spark 2 has reached End of Support EOS. Clients are advised to use...

Malicious code in spark-haven-uqa530-project (npm)

The package spark-haven-uqa530-project was found to contain malicious code...

Malicious code in spark-kt0s0-rqyop-quicksilver-project (npm)

The package spark-kt0s0-rqyop-quicksilver-project was found to contain malicious code...

MAL-2025-33701 Malicious code in spark-essence-igy405-project (npm)

The package spark-essence-igy405-project was found to contain malicious code...

MAL-2025-40893 Malicious code in zephyr-9s2tr-65tu8-spark-project (npm)

The package zephyr-9s2tr-65tu8-spark-project was found to contain malicious code...

Malicious code in opal-qdbth-smu7z-spark-project (npm)

The package opal-qdbth-smu7z-spark-project was found to contain malicious code...

Malicious code in spark-essence-igy405-project (npm)

The package spark-essence-igy405-project was found to contain malicious code...

Malicious code in zephyr-9s2tr-65tu8-spark-project (npm)

The package zephyr-9s2tr-65tu8-spark-project was found to contain malicious code...