Skip to content
Security
فارسی
Sign in / Register
Vulnerabilities
Products
Plugins
All products
org.apache.spark:spark-core_2.11
Maven
· Package
10 reports
Vulnerability alerts
Follow
Package, identifier or title
Search
Severity
All
Critical
High
Medium
Low
Unknown
Fix status
All
Fix reported
No fix reported
Sort by
Recently updated
Highest severity
Report
Product
Ecosystem
Severity
Fix status
Last updated
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark via crafted URL
CVE-2018-8024 · GHSA-8CW6-5QVP-Q3WJ
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
Medium
Fix reported
2026-09-10
Sensitive data written to disk unencrypted in Spark
CVE-2019-10099 · GHSA-FP5J-3FPF-MHJ5
Version ranges need review.
org.apache.spark:spark-core_2.11
pyspark
Maven
PyPI
High
Fix reported
2026-06-10
Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark
CVE-2018-1334 · GHSA-6MQQ-8R44-VMJC
Version ranges need review.
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
PyPI
Medium
Fix reported
2026-06-10
Apache Spark vulnerable to Log Injection
CVE-2022-31777 · GHSA-43XG-8WMJ-CW8H
Version ranges need review.
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
PyPI
Red Hat
Medium
Fix reported
2026-06-10
Apache Spark: Spark History Server Code Execution Vulnerability
CVE-2025-54920 · GHSA-JWP6-CVJ8-FW65
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
Red Hat
High
Fix reported
2026-03-17
Improper Input Validation in Apache Spark
CVE-2018-11804 · GHSA-62G2-M955-V383
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
High
No fix reported
2025-12-12
Remote Code Execution in spark-core
CVE-2018-17190 · GHSA-PHG2-9C5G-M4Q7
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
Critical
No fix reported
2024-12-02
Apache Spark Deserialization of Untrusted Data vulnerability
CVE-2017-12612 · GHSA-8RHC-48PP-52GR
Version ranges need review.
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
PyPI
High
Fix reported
2024-11-26
org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11 Improper Authentication vulnerability
CVE-2018-11770 · GHSA-W4R4-65MG-45X2
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
Medium
No fix reported
2024-06-11
Moderate severity vulnerability that affects org.apache.spark:spark-core_2.10 and org.apache.spark:spark-core_2.11
CVE-2017-7678 · GHSA-R34R-F84J-5X4X
org.apache.spark:spark-core_2.10
org.apache.spark:spark-core_2.11
Maven
Medium
Fix reported
2023-11-08
