CLEANSTART-2026-OX23337 Security fixes in spark 3.5.9-r1

🗓️ 13 Aug 2026 12:10:09Reported by GoogleType

osv🔗 osv.dev👁 1 Views

Spark 3.5.9-r1 fixes 12 vulnerabilities including CVE-2026-54512 through CVE-2026-54515 and ghsa-rmj7-2vxq-3g9f.

Reporter	Title	Published	Views	Family All 977
IBM Security Bulletins	Security Bulletin: There is a vulnerability in lz4-java-1.7.1.jar used by IBM Maximo Manage application in IBM Maximo Application Suite (CVE-2025-12183)	2 Feb 202612:05	–	ibm
IBM Security Bulletins	Security Bulletin: Security vulnerabilities have been detected in IBM Security Verify Governance Identity Manager Adapters	13 Jul 202606:06	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities found in IBM ApplinX.	25 Jul 202616:37	–	ibm
IBM Security Bulletins	Security Bulletin: There are multiple vulnerabilities in IBM DB2 bundled with IBM Application Performance Management products.	21 May 202614:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerabilities in jackson-databind may affect IBM APM Linux KVM Agent for Virtual Environments.	4 Aug 202608:12	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Discovery Cartridge affected by vulnerability in lz4-java-1.8.0.jar	16 Apr 202617:52	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Integration Designer is vulnerable to multiple CVEs	12 Aug 202620:39	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM is vulnerable to using components with known vulnerabilities	23 Jul 202618:00	–	ibm
IBM Security Bulletins	Security Bulletin: Vulnerability in lz4 affects IBM watsonx Assistant Cartridge and IBM watsonx Orchestrate with watsonx Assistant Cartridge.	22 Jun 202613:40	–	ibm
IBM Security Bulletins	Security Bulletin: SPSS Collaboration and Deployment Services is affected by multiple vulnerabilities in jackson-databind	30 Jul 202618:43	–	ibm

Source	Link
spark	www.spark.apache.org/

14 Aug 2026 09:43Current

6.6Medium risk

Vulners AI Score6.6

CVSS 48.8

CVSS 3.15.3 - 8.1

EPSS0.00779

SSVC