spark-4.0/4.0.0-r0: cve remediation

[octo-sts]

spark-4.0/4.0.0-r0: fix GHSA-wxr5-93ph-8wr9

Advisory data: https://github.com/wolfi-dev/advisories/blob/main/spark-4.0.advisories.yaml

---

"Breadcrumbs" for this automated service

• Source Code: https://go/cve-remedy-automation-source
• Logs: https://go/cve-remedy-automation-logs
• Docs: (not provided yet)

[jamie-albert]

advisory: wolfi-dev/advisories#20540

[octo-sts]

This vulnerability remediation is stale and no longer needed. 👋

Advisory CGA-fc3h-q37m-f2mr has the latest event type of "pending-upstream-fix": https://github.com/wolfi-dev/advisories/blob/main/spark-4.0.advisories.yaml

ID:      CGA-fc3h-q37m-f2mr
Package: spark-4.0
Aliases: CVE-2025-48734 GHSA-wxr5-93ph-8wr9
Events:
  - "scan/v1" at 2025-06-25 08:54:37 UTC
  - "pending-upstream-fix" at 2025-06-25 21:47:11 UTC