org.apache.spark:spark-core_2.10

3 results · Clear filters · Feed

• High 8.8
  CVE-2025-54920

  Apache Spark: Spark History Server Code Execution Vulnerability

  This issue affects Apache Spark: before 3.5.7 and 4.0.1. Users are recommended to upgrade to version 3.5.7 or 4.0.1 and above, which fixes the issue. Summary Apache Spark 3.5.4 and earlier versions contain a code execution vulnerability in the Spark History W…

  Apache Software Foundation Apache Spark org.apache.spark:spark-core_2.11 org.apache.spark:spark-core_2.10 Maven
  Mar 14, 2026
• High 7.5
  CVE-2018-11804

  Improper Input Validation in Apache Spark

  Spark's Apache Maven-based build includes a convenience script, 'build/mvn', that downloads and runs a zinc server to speed up compilation. It has been included in release branches since 1.3.x, up to and including master. This server will accept connections f…

  Apache Software Foundation Apache Spark org.apache.spark:spark-core_2.11 org.apache.spark:spark-core_2.10 Maven
  Oct 24, 2018
• High 7.8
  CVE-2017-12612

  Apache Spark Deserialization of Untrusted Data vulnerability

  In Apache Spark 1.6.0 until 2.1.1, the launcher API performs unsafe deserialization of data received by its socket. This makes applications launched programmatically using the launcher API potentially vulnerable to arbitrary code execution by an attacker with…

  pyspark org.apache.spark:spark-core_2.11 org.apache.spark:spark-core_2.10 Maven PyPI
  Sep 13, 2017