Search for packages
purl | pkg:maven/org.apache.spark/spark-core_2.10@2.2.2 |
Next non-vulnerable version | None. |
Latest non-vulnerable version | None. |
Risk | 10.0 |
Vulnerability | Summary | Fixed by |
---|---|---|
VCID-d7qj-byug-aaan
Aliases: CVE-2018-17190 GHSA-phg2-9c5g-m4q7 |
Low severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 | There are no reported fixed by versions. |
VCID-nhcd-qhgh-aaah
Aliases: CVE-2018-11770 GHSA-w4r4-65mg-45x2 |
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 |
Affected by 1 other vulnerability. |
Vulnerability | Summary | Aliases |
---|---|---|
VCID-2md5-chbw-aaaj | In Apache Spark 1.0.0 to 2.1.2, 2.2.0 to 2.2.1, and 2.3.0, when using PySpark or SparkR, it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. |
CVE-2018-1334
GHSA-6mqq-8r44-vmjc PYSEC-2018-25 |
VCID-xr14-da7p-aaam | Low severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 |
CVE-2018-8024
GHSA-8cw6-5qvp-q3wj |