Search for packages
purl | pkg:maven/org.apache.spark/spark-core_2.10@2.1.0 |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-1jx4-27ep-aaae
Aliases: CVE-2017-7678 GHSA-r34r-f84j-5x4x |
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 |
Affected by 4 other vulnerabilities. |
VCID-2md5-chbw-aaaj
Aliases: CVE-2018-1334 GHSA-6mqq-8r44-vmjc PYSEC-2018-25 |
In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
VCID-d7qj-byug-aaan
Aliases: CVE-2018-17190 GHSA-phg2-9c5g-m4q7 |
Low severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 | There are no reported fixed by versions. |
VCID-jpbx-msnb-aaab
Aliases: CVE-2017-12612 GHSA-8rhc-48pp-52gr PYSEC-2017-147 |
High severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 |
Affected by 5 other vulnerabilities. |
VCID-nhcd-qhgh-aaah
Aliases: CVE-2018-11770 GHSA-w4r4-65mg-45x2 |
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 |
Affected by 1 other vulnerability. |
VCID-xr14-da7p-aaam
Aliases: CVE-2018-8024 GHSA-8cw6-5qvp-q3wj |
Low severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 |
Affected by 3 other vulnerabilities. Affected by 2 other vulnerabilities. |
Vulnerability | Summary | Aliases |
---|---|---|
This package is not known to fix vulnerabilities. |