Package · Maven

org.apache.spark:spark-core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.5

CVE-2021-38296

Apache Spark Key Negotiation Vulnerability

Apache Spark supports end-to-end encryption of RPC connections via "spark.authenticate" and "spark.network.crypto.enabled". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication protocol that allows for full encryption key recovery. After an …

Apache Software Foundation Apache Spark pyspark org.apache.spark:spark-core Maven PyPI

Mar 10, 2022