pyspark vulnerabilities (PyPI)

12 vulnerabilities.

• pyspark PyPI Apache Spark: XSS Vulnerability in Spark Web 3.5.4 CVE-2026-32773 Fix available 6.1 MediumSeptember 2, 2026
• pyspark PyPI Apache Spark, Apache Spark: RPC encryption defaults to unauthenticated AES-CTR mode, enabling man-in-the-middle ciphertext modification attacks CVE-2025-55039 Fix available 6.5 MediumOctober 15, 2025
• pyspark PyPI Apache Spark: Shell command injection via Spark UI CVE-2023-32007 Fix available EPSS 76.0% 8.8 HighMay 2, 2023
• pyspark PyPI Apache Spark proxy-user privilege escalation from malicious configuration class CVE-2023-22946 Fix available 6.4 MediumApril 17, 2023
• pyspark PyPI Apache Spark XSS vulnerability in log viewer UI Javascript CVE-2022-31777 Fix available 5.4 MediumNovember 1, 2022
• pyspark PyPI Apache Spark shell command injection vulnerability via Spark UI CVE-2022-33891 In KEVPublic exploitFix available EPSS 93.2% 8.8 HighJuly 18, 2022
• pyspark PyPI Apache Spark Key Negotiation Vulnerability CVE-2021-38296 Fix available 7.5 HighMarch 10, 2022
• pyspark PyPI Improper Authentication in Apache Spark CVE-2020-9480 Public exploitFix available EPSS 29.4% 9.8 CriticalJune 23, 2020
• pyspark PyPI Sensitive data written to disk unencrypted in Spark CVE-2019-10099 Fix available 7.5 HighAugust 7, 2019
• pyspark PyPI Pyspark User Impersonation Vulnerability CVE-2018-11760 Fix available 5.5 MediumFebruary 4, 2019
• pyspark PyPI Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark CVE-2018-1334 Fix available 4.7 MediumJuly 12, 2018
• pyspark PyPI Apache Spark Deserialization of Untrusted Data vulnerability CVE-2017-12612 Fix available 7.8 HighSeptember 13, 2017