pkg:Maven/org.apache.spark:spark-core_2.11

All known vulnerabilities

• CRITICAL9.8CVE-2018-17190Remote Code Execution in spark-core
  from 0
• HIGH8.8CVE-2025-54920Apache Spark: Spark History Server Code Execution Vulnerability
  from 0, <= 2.4.8
• HIGH7.8CVE-2017-12612Apache Spark Deserialization of Untrusted Data vulnerability
  from 0, < 2.1.2
• HIGH7.5Improper Input Validation in Apache Spark
  >= 1.3.0, <= 2.1.3
• HIGH7.5Sensitive data written to disk unencrypted in Spark
  from 0, < 2.3.3
• MEDIUM6.1Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
  from 0, < 2.2.0
• MEDIUM5.4Apache Spark vulnerable to Log Injection
  from 0
• MEDIUM5.4Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
  >= 2.1.0, < 2.1.3
• MEDIUM4.7Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark
  >= 1.0.0, < 2.1.3
• MEDIUM4.2org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
  >= 1.0.0, <= 2.3.2