https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T15:14:49.945827+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-39928 CVE-2024-39928 — Apache Linkis Spark EngineConn: Commons Lang's RandomStringUtils Random string security vulnerability 2026-10-06T15:14:49.963445+00:00

Affected: Apache Software Foundation Apache Linkis Spark EngineConn, apache_software_foundation apache_linkis_spark_engineconn

In Apache Linkis <= 1.5.0, a Random string security vulnerability in Spark EngineConn, random string generated by the Token when starting Py4j uses the Commons Lang's RandomStringUtils. Users are recommended to upgrade to version 1.6.0, which fixes this issue.