spark-4.0/4.0.0-r0: cve remediation

[octo-sts]

spark-4.0/4.0.0-r0: fix GHSA-wf8f-6423-gfxg

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/spark-4.0.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

[jamie-albert]

advisory: wolfi-dev/advisories#20540

[octo-sts]

This vulnerability remediation is stale and no longer needed. 👋

Advisory CGA-53qq-qh98-q7jv has the latest event type of "pending-upstream-fix": https://github.com/wolfi-dev/advisories/blob/main/spark-4.0.advisories.yaml

ID:      CGA-53qq-qh98-q7jv
Package: spark-4.0
Aliases: CVE-2025-49128 GHSA-wf8f-6423-gfxg
Events:
  - "scan/v1" at 2025-06-25 08:54:36 UTC
  - "pending-upstream-fix" at 2025-06-25 21:47:44 UTC