All products

org.apache.spark:spark-core_2.13

Maven · Package
4 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Apache Spark History Server allows stored cross-site scripting through unescaped application namesCVE-2026-32773 · GHSA-9437-39HJ-3C93Version ranges need review. org.apache.spark:spark-core_2.12org.apache.spark:spark-core_2.13 MavenPyPIRed Hat Medium Fix reported
Apache Spark vulnerable to Log InjectionCVE-2022-31777 · GHSA-43XG-8WMJ-CW8HVersion ranges need review. org.apache.spark:spark-core_2.10org.apache.spark:spark-core_2.11 MavenPyPIRed Hat Medium Fix reported
Apache Spark vulnerable to Improper Privilege ManagementCVE-2023-22946 · GHSA-329J-JFVR-RHR6Version ranges need review. org.apache.spark:spark-core_2.12org.apache.spark:spark-core_2.13 MavenPyPI Critical Fix reported
Apache Spark: Spark History Server Code Execution VulnerabilityCVE-2025-54920 · GHSA-JWP6-CVJ8-FW65 org.apache.spark:spark-core_2.10org.apache.spark:spark-core_2.11 MavenRed Hat High Fix reported