Vulnerabilities

search
ID
Packages
Summary
Published
arrow_upward
Attributes
PYSEC-2026-3966
  • PyPI/pyspark
 See record for full details 02 Sep
  • Fix available
  • Severity - 6.1 (Medium)
GHSA-6p6v-m64v-jx8q
  • Maven/org.apache.spark:spark-network-common_2.12
  • Maven/org.apache.spark:spark-network-common_2.13
  • PyPI/pyspark
 Apache Spark has Inadequate Encryption Strength 15 Oct 2025
  • Fix available
  • Severity - 2.9 (Low)
PYSEC-2025-184
  • PyPI/pyspark
 See record for full details 15 Oct 2025
  • Fix available
  • Severity - 6.5 (Medium)
GHSA-59hw-j9g6-mfg3
  • Maven/org.apache.spark:spark-parent_2.12
  • PyPI/pyspark
 Apache Spark UI vulnerable to Command Injection 02 May 2023
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2023-72
  • PyPI/pyspark
 See record for full details 02 May 2023
  • Fix available
GHSA-329j-jfvr-rhr6
  • Maven/org.apache.spark:spark-core_2.12
  • Maven/org.apache.spark:spark-core_2.13
  • PyPI/pyspark
 Apache Spark vulnerable to Improper Privilege Management 17 Apr 2023
  • Fix available
  • Severity - 9.9 (Critical)
PYSEC-2023-44
  • PyPI/pyspark
 See record for full details 17 Apr 2023
  • Fix available
GHSA-43xg-8wmj-cw8h
  • Maven/org.apache.spark:spark-core_2.10
  • Maven/org.apache.spark:spark-core_2.11
  • Maven/org.apache.spark:spark-core_2.12
  • Maven/org.apache.spark:spark-core_2.13
  • Maven/org.apache.spark:spark-core_2.9.3
  • ... 1 more
 Apache Spark vulnerable to Log Injection 01 Nov 2022
  • Fix available
  • Severity - 5.4 (Medium)
PYSEC-2022-42976
  • PyPI/pyspark
 See record for full details 01 Nov 2022
  • Fix available
GHSA-4x9r-j582-cgr8
  • Maven/org.apache.spark:spark-parent_2.12
  • PyPI/pyspark
 Apache Spark UI can allow impersonation if ACLs enabled 19 Jul 2022
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2022-236
  • PyPI/pyspark
 See record for full details 18 Jul 2022
  • Fix available
GHSA-9rr6-jpg7-9jg6
  • Maven/org.apache.spark:spark-core
  • PyPI/pyspark
 Authentication Bypass by Capture-replay in Apache Spark 11 Mar 2022
  • Fix available
  • Severity - 8.7 (High)
PYSEC-2022-186
  • PyPI/pyspark
 See record for full details 10 Mar 2022
  • Fix available
GHSA-wgx7-jwwm-cgjv
  • Maven/org.apache.spark:spark-parent_2.11
  • PyPI/pyspark
 Improper Authentication in Apache Spark 10 Feb 2022
  • Fix available
  • Severity - 9.3 (Critical)
PYSEC-2020-95
  • PyPI/pyspark
 See record for full details 23 Jun 2020
  • Fix available
GHSA-fp5j-3fpf-mhj5
  • Maven/org.apache.spark:spark-core_2.11
  • PyPI/pyspark
 Sensitive data written to disk unencrypted in Spark 08 Aug 2019
  • Fix available
  • Severity - 8.7 (High)
Load more...