CRITICAL 9.9 Maven PyPI
GHSA-329j-jfvr-rhr6 · BIT-spark-2023-22946, CVE-2023-22946 Apache Spark vulnerable to Improper Privilege Management
Modified: 10/15/2024
package
PyPI / pyspark
pkg:pypi/pyspark
MEDIUM 5.4 PyPI Maven
GHSA-43xg-8wmj-cw8h · BIT-spark-2022-31777, CVE-2022-31777 Apache Spark vulnerable to Log Injection
Modified: 12/18/2025
HIGH 8.8 Maven PyPI
GHSA-4x9r-j582-cgr8 · BIT-spark-2022-33891, CVE-2022-33891 Apache Spark UI can allow impersonation if ACLs enabled
Modified: 10/22/2025
HIGH 8.8 Maven PyPI
GHSA-59hw-j9g6-mfg3 · BIT-spark-2023-32007, CVE-2023-32007 Apache Spark UI vulnerable to Command Injection
Modified: 2/13/2025
MEDIUM 4.7 Maven PyPI
GHSA-6mqq-8r44-vmjc · CVE-2018-1334, PYSEC-2018-25 Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark
Modified: 10/21/2024
HIGH 7.8 Maven PyPI
GHSA-8rhc-48pp-52gr · CVE-2017-12612, PYSEC-2017-147 Apache Spark Deserialization of Untrusted Data vulnerability
Modified: 11/26/2024
HIGH 7.5 Maven PyPI
GHSA-9rr6-jpg7-9jg6 · BIT-spark-2021-38296, CVE-2021-38296 Authentication Bypass by Capture-replay in Apache Spark
Modified: 10/25/2024
HIGH 7.5 Maven PyPI
GHSA-fp5j-3fpf-mhj5 · CVE-2019-10099, PYSEC-2019-114 Sensitive data written to disk unencrypted in Spark
Modified: 10/24/2024
MEDIUM 5.5 PyPI
GHSA-fvxv-9xxr-h7wj · CVE-2018-11760, PYSEC-2019-169 Pyspark User Impersonation Vulnerability
Modified: 12/4/2024
CRITICAL 9.8 Maven PyPI
GHSA-wgx7-jwwm-cgjv · BIT-spark-2020-9480, CVE-2020-9480 Improper Authentication in Apache Spark
Modified: 10/15/2024
HIGH 7.8 PyPI
PYSEC-2017-147 · CVE-2017-12612, GHSA-8rhc-48pp-52gr Modified: 11/25/2024
— PyPI
PYSEC-2018-25 · CVE-2018-1334, GHSA-6mqq-8r44-vmjc Modified: 11/8/2023
— PyPI
PYSEC-2019-114 · CVE-2019-10099, GHSA-fp5j-3fpf-mhj5 Modified: 11/8/2023
— PyPI
PYSEC-2019-169 · CVE-2018-11760, GHSA-fvxv-9xxr-h7wj Modified: 11/8/2023
— PyPI
PYSEC-2020-95 · BIT-spark-2020-9480, CVE-2020-9480 Modified: 12/6/2023
— PyPI
PYSEC-2022-186 · BIT-spark-2021-38296, CVE-2021-38296 Modified: 12/6/2023
— PyPI
PYSEC-2022-236 · BIT-spark-2022-33891, CVE-2022-33891 Modified: 6/8/2026
— PyPI
PYSEC-2022-42976 · BIT-spark-2022-31777, CVE-2022-31777 Modified: 12/6/2023
— PyPI
PYSEC-2023-44 · BIT-spark-2023-22946, CVE-2023-22946 Modified: 10/9/2025
— PyPI
PYSEC-2023-72 · BIT-spark-2023-32007, CVE-2023-32007 Modified: 6/8/2026
MEDIUM 6.5 PyPI
PYSEC-2025-184 · CVE-2025-55039, GHSA-6p6v-m64v-jx8q Modified: 5/20/2026