Repository navigation
Update dependency com.sparkjava:spark-core to v2.9.4 (master) - #17
mend-for-github-com[bot] wants to merge 1 commit into
Security Report
❗️Scan Incomplete: The scan completed with partial failure. The integration encountered issues with one or more projects in this repository, preventing their scan. The errors occurred in the following package managers: gradle. Consequently, there may be gaps in the coverage of open-source dependencies used in the repository.
❌ New vulnerabilities:
| Vulnerability | Severity |  CVSS Score |
Exploit Maturity | EPSS | Vulnerable Library | Direct Library | Suggested Fix | Issue | Reachability |
|---|---|---|---|---|---|---|---|---|---|
CVE-2026-19203Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
 High |
8.2 | Not Defined | 0.306% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | None | ||
CVE-2026-10050Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-client/9.4.48.v20220622/fc2e953a7030045e1ca467d57e200856a170848e/jetty-client-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> websocket-server-9.4.48.v20220622.jar -> websocket-client-9.4.48.v20220622.jar -> ❌ jetty-client-9.4.48.v20220622.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.632% | Transitive jetty-client-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | None | ||
CVE-2026-10050Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-security/9.4.48.v20220622/6114f92529e9cff489528e6be77b48526a92d577/jetty-security-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> websocket-server-9.4.48.v20220622.jar -> jetty-servlet-9.4.48.v20220622.jar -> ❌ jetty-security-9.4.48.v20220622.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 0.632% | Transitive jetty-security-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | None | ||
CVE-2023-36478Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
High |
7.5 | Not Defined | 4.832% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.53.v20231009 |
None | |
CVE-2026-2332Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
High |
7.4 | Not Defined | 1.305% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | None | ||
CVE-2024-13009Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-server/9.4.48.v20220622/b91a0641cda31c93962503b88f783602d2bd8093/jetty-server-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> ❌ jetty-server-9.4.48.v20220622.jar (Vulnerable Library) |
High |
7.2 | Not Defined | 0.548% | Transitive jetty-server-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.57.v20241219 |
None | |
CVE-2024-8184Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-server/9.4.48.v20220622/b91a0641cda31c93962503b88f783602d2bd8093/jetty-server-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> ❌ jetty-server-9.4.48.v20220622.jar (Vulnerable Library) |
 Medium |
5.9 | Not Defined | 1.03% | Transitive jetty-server-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.55.v20240627 |
None | |
CVE-2026-6790Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-server/9.4.48.v20220622/b91a0641cda31c93962503b88f783602d2bd8093/jetty-server-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> ❌ jetty-server-9.4.48.v20220622.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 0.31% | Transitive jetty-server-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | None | ||
CVE-2023-40167Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 1.279% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.52.v20230823 |
None | |
CVE-2023-26048Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-server/9.4.48.v20220622/b91a0641cda31c93962503b88f783602d2bd8093/jetty-server-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> ❌ jetty-server-9.4.48.v20220622.jar (Vulnerable Library) |
Medium |
5.3 | Not Defined | 3.369% | Transitive jetty-server-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.51.v20230217 |
None | |
CVE-2026-17459Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/com.sparkjava/spark-core/2.9.4/98117708e6ac42f2be3d2948b2193be6b0258c62/spark-core-2.9.4.jar Dependency Hierarchy: -> ❌ spark-core-2.9.4.jar (Vulnerable Library) |
Medium |
4.3 | Proof of concept | 0.467% | Direct spark-core-2.9.4.jar |
spark-core-2.9.4.jar | None | ||
WS-2023-0236Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-xml/9.4.48.v20220622/2c8b7ad6b64437a693cd30666f3def666aac8207/jetty-xml-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-webapp-9.4.48.v20220622.jar -> ❌ jetty-xml-9.4.48.v20220622.jar (Vulnerable Library) |
 Low |
3.9 | Not Defined | Transitive jetty-xml-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.52.v20230823 |
None | ||
CVE-2025-11143Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
Low |
3.7 | Not Defined | 0.161% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | None | ||
CVE-2024-6763Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
Low |
3.7 | Not Defined | 0.965% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.57.v20241219 |
None | |
CVE-2024-6763Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-server/9.4.48.v20220622/b91a0641cda31c93962503b88f783602d2bd8093/jetty-server-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> ❌ jetty-server-9.4.48.v20220622.jar (Vulnerable Library) |
Low |
3.7 | Not Defined | 0.965% | Transitive jetty-server-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.57.v20241219 |
None | |
CVE-2023-26049Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-http/9.4.48.v20220622/8cb235e70bda0c5e97a41e7ee0ea33ee7f5bcc6a/jetty-http-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> jetty-server-9.4.48.v20220622.jar -> ❌ jetty-http-9.4.48.v20220622.jar (Vulnerable Library) |
Low |
2.4 | Not Defined | 1.3% | Transitive jetty-http-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.51.v20230217 |
None | |
CVE-2023-26049Path to dependency file: /build.gradle Path to vulnerable library: /tmp/containerbase/cache/.gradle/caches/modules-2/files-2.1/org.eclipse.jetty/jetty-server/9.4.48.v20220622/b91a0641cda31c93962503b88f783602d2bd8093/jetty-server-9.4.48.v20220622.jar Dependency Hierarchy: -> spark-core-2.9.4.jar (Root Library) -> ❌ jetty-server-9.4.48.v20220622.jar (Vulnerable Library) |
Low |
2.4 | Not Defined | 1.3% | Transitive jetty-server-9.4.48.v20220622.jar |
spark-core-2.9.4.jar | Transitive 9.4.51.v20230217 |
None |
✔️ Remediated vulnerabilities:
| Vulnerability | Vulnerable Library |
|---|---|
| CVE-2026-2332 | jetty-http-9.4.4.v20170414.jar |
| CVE-2019-10241 | jetty-servlet-9.4.4.v20170414.jar |
| CVE-2023-26049 | jetty-http-9.4.4.v20170414.jar |
| CVE-2024-6763 | jetty-http-9.4.4.v20170414.jar |
| CVE-2023-36478 | jetty-http-9.4.4.v20170414.jar |
| CVE-2022-2047 | jetty-client-9.4.4.v20170414.jar |
| CVE-2025-11143 | jetty-http-9.4.4.v20170414.jar |
| CVE-2018-12536 | jetty-servlet-9.4.4.v20170414.jar |
| CVE-2019-10241 | jetty-util-9.4.4.v20170414.jar |
| CVE-2022-2047 | jetty-http-9.4.4.v20170414.jar |
| CVE-2017-7656 | jetty-server-9.4.4.v20170414.jar |
| CVE-2018-12538 | jetty-server-9.4.4.v20170414.jar |
| CVE-2024-8184 | jetty-server-9.4.4.v20170414.jar |
| CVE-2020-27216 | jetty-webapp-9.4.4.v20170414.jar |
| CVE-2018-12545 | jetty-server-9.4.4.v20170414.jar |
| CVE-2026-19203 | jetty-http-9.4.4.v20170414.jar |
| CVE-2017-7657 | jetty-http-9.4.4.v20170414.jar |
| CVE-2017-7656 | jetty-http-9.4.4.v20170414.jar |
| CVE-2018-12536 | jetty-util-9.4.4.v20170414.jar |
| CVE-2023-26048 | jetty-server-9.4.4.v20170414.jar |
| CVE-2021-34428 | jetty-server-9.4.4.v20170414.jar |
| CVE-2026-17459 | spark-core-2.6.0.jar |
| CVE-2022-2047 | jetty-server-9.4.4.v20170414.jar |
| CVE-2021-28169 | jetty-server-9.4.4.v20170414.jar |
| CVE-2017-9735 | jetty-util-9.4.4.v20170414.jar |
| CVE-2026-10050 | jetty-security-9.4.4.v20170414.jar |
| CVE-2017-7658 | jetty-http-9.4.4.v20170414.jar |
| CVE-2021-28165 | jetty-server-9.4.4.v20170414.jar |
| CVE-2019-10241 | jetty-server-9.4.4.v20170414.jar |
| CVE-2020-27218 | jetty-server-9.4.4.v20170414.jar |
| CVE-2019-10246 | jetty-server-9.4.4.v20170414.jar |
| CVE-2019-10247 | jetty-server-9.4.4.v20170414.jar |
| CVE-2023-26049 | jetty-server-9.4.4.v20170414.jar |
| CVE-2021-28169 | jetty-http-9.4.4.v20170414.jar |
| CVE-2024-6763 | jetty-server-9.4.4.v20170414.jar |
| CVE-2017-9735 | jetty-server-9.4.4.v20170414.jar |
| CVE-2017-7658 | jetty-server-9.4.4.v20170414.jar |
| CVE-2017-7657 | jetty-server-9.4.4.v20170414.jar |
| CVE-2018-12536 | jetty-server-9.4.4.v20170414.jar |
| WS-2023-0236 | jetty-xml-9.4.4.v20170414.jar |
| CVE-2026-6790 | jetty-server-9.4.4.v20170414.jar |
| CVE-2024-13009 | jetty-server-9.4.4.v20170414.jar |
| CVE-2023-40167 | jetty-http-9.4.4.v20170414.jar |
| CVE-2021-28165 | jetty-io-9.4.4.v20170414.jar |
Base branch total remaining vulnerabilities: 113
Base branch commit: null
Total libraries scanned: 42
Scan token: f5234a124c8a4bcd95250e79ddd0896c