pyspark vulnerabilities

Browse known CVEs and advisories by package and ecosystem. Severity tells you the worst case. What determines real risk is whether the vulnerable code actually runs in your applications.

Browse by ecosystem

npm PyPI Maven Go RubyGems Cargo NuGet Composer pub Swift GitHub Actions

CVE-IDSeverityPackage summary

CVE-2025-55039Loworg.apache.spark:spark-network-common_2.13: Apache Spark has Inadequate Encryption Strength CVE-2023-32007Highorg.apache.spark:spark-parent_2.12: Apache Spark UI vulnerable to Command Injection CVE-2023-22946Criticalorg.apache.spark:spark-core_2.12: Apache Spark vulnerable to Improper Privilege Management CVE-2022-31777Mediumpyspark: Apache Spark vulnerable to Log Injection CVE-2022-33891Highorg.apache.spark:spark-parent_2.12: Apache Spark UI can allow impersonation if ACLs enabled CVE-2021-38296Highorg.apache.spark:spark-core: Authentication Bypass by Capture-replay in Apache Spark CVE-2020-9480Criticalorg.apache.spark:spark-parent_2.11: Improper Authentication in Apache Spark CVE-2019-10099Highorg.apache.spark:spark-core_2.11: Sensitive data written to disk unencrypted in Spark CVE-2018-1334Mediumorg.apache.spark:spark-core_2.10: Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark CVE-2018-11760Mediumpyspark: Pyspark User Impersonation Vulnerability CVE-2017-12612Highorg.apache.spark:spark-core_2.11: Apache Spark Deserialization of Untrusted Data vulnerability

Stop the waste.
Protect your environment with Kodem.

Get a personalized demo

Get a personalized demo