spark-4.0/4.0.0-r0: cve remediation

[octo-sts]

spark-4.0/4.0.0-r0: fix GHSA-qh8g-58pp-2wxh

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/spark-4.0.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

[jamie-albert]

advisory: wolfi-dev/advisories#20540

[octo-sts]

This vulnerability remediation is stale and no longer needed. 👋

Advisory CGA-9h2q-jvgf-3h42 has the latest event type of "pending-upstream-fix": https://github.com/wolfi-dev/advisories/blob/main/spark-4.0.advisories.yaml

ID:      CGA-9h2q-jvgf-3h42
Package: spark-4.0
Aliases: CVE-2024-6763 GHSA-qh8g-58pp-2wxh
Events:
  - "scan/v1" at 2025-06-25 08:54:34 UTC
  - "pending-upstream-fix" at 2025-06-25 21:47:27 UTC