Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.linkis/linkis-engineplugin-spark@1.6.0
purl pkg:maven/org.apache.linkis/linkis-engineplugin-spark@1.6.0
Vulnerabilities affecting this package (0)
Vulnerability Summary Fixed by
This package is not known to be affected by vulnerabilities.
Vulnerabilities fixed by this package (1)
Vulnerability Summary Aliases
VCID-gbxh-e1zf-cqcd Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils. Users are recommended to upgrade to version 1.6.0, which fixes this issue. CVE-2024-39928
GHSA-6gch-63wp-4v5f

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-05T21:48:59.456489+00:00 GHSA Importer Fixing VCID-gbxh-e1zf-cqcd https://github.com/advisories/GHSA-6gch-63wp-4v5f 38.6.0
2026-06-04T16:45:44.941835+00:00 GithubOSV Importer Fixing VCID-gbxh-e1zf-cqcd https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/09/GHSA-6gch-63wp-4v5f/GHSA-6gch-63wp-4v5f.json 38.6.0
2026-06-04T16:22:19.236459+00:00 GitLab Importer Fixing VCID-gbxh-e1zf-cqcd https://gitlab.com/gitlab-org/advisories-community/-/blob/main/maven/org.apache.linkis/linkis-engineplugin-spark/CVE-2024-39928.yml 38.6.0