azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2025-55039 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

pytispark (2.0.0) potentially affected by CVE-2025-55039 via pyspark (2.3.3)

pyspark PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - pytispark 2.0.0 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2025-55039 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

chispa (0.2.0), dye-score (0.1.0) +4 more potentially affected by CVE-2025-55039 via pyspark (2.4.0)

pyspark PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - chispa 0.2.0 - dye-score 0.1.0 - md2k-cerebral-cortex 3.0.0 - pybda =0.0.4, =0.0.4, =0.0.1, =0.0.8 Source cves: CVE-2025-55039 Source advisory:...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2025-55039 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

abi-ds-utils (>=0.1.2, <=1.2.3), abi-pyspark-utils (>=0.1.1, <=0.1.4) +182 more potentially affected by CVE-2025-55039 via pyspark (>=3.0.0, <=3.4.2)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0.dev1715243393, =1.7.0.dev1715243330, =1.7.0.dev1715246251, =1.7.0.dev1715246284, =0.0.2, =1.0.0, =0.12.0.dev0, =0.14.0.dev2 - bigdl-chronos-spark3 2.0.0 and more Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

abi-ds-utils (>=0.1.2, <=1.2.3), abi-pyspark-utils (>=0.1.1, <=0.1.4) +229 more potentially affected by CVE-2025-55039 via pyspark (>=2.1.2, <=3.4.2)

pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =1.7.0.dev1715243393, =1.7.0.dev1715243330, =1.7.0.dev1715246251, =1.7.0.dev1715246284, =0.2.0, =0.0.2, =1.0.0, =0.9.1, =1.0.2 and more Source cves: CVE-2025-55039 Source advisory: MEND:CVE-2025-55039...

EUVD-2018-0127

Malware in sbrugna...

CVE-2019-10099

Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk controlled by spark.maxRemoteBlockSizeFetchToMem; in SparkR, using parallelize; in Pyspark, using...

PySpark Detection

A PySpark Python library is installed on the remote host. Note that Nessus has relied upon on the application's self-reported version number. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; if description scriptid208139; scriptversion"1.6";...

Internet Bug Bounty: CVE-2023-40195: Apache Airflow Spark Provider Deserialization Vulnerability RCE

Apache Airflow Spark Provider before 4.1.3 was affected by a deserialization vulnerability that allowed remote code execution RCE. Attackers could exploit this vulnerability by configuring a malicious Spark server address through the Airflow UI, which would then manipulate the PySpark clients...

analytics-zoo (0.4.0) potentially affected by CVE-2023-22946 via pyspark (2.3.2)

pyspark PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo 0.4.0 Source cves: CVE-2023-22946 Source advisory: OSV:GHSA-329J-JFVR-RHR6...

pytispark (2.0.0) potentially affected by CVE-2023-22946 via pyspark (2.3.3)

pyspark PYPI version 2.3.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - pytispark 2.0.0 Source cves: CVE-2023-22946 Source advisory: OSV:GHSA-329J-JFVR-RHR6...

chispa (0.2.0), dye-score (0.1.0) +4 more potentially affected by CVE-2023-22946 via pyspark (2.4.0)

pyspark PYPI version 2.4.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - chispa 0.2.0 - dye-score 0.1.0 - md2k-cerebral-cortex 3.0.0 - pybda =0.0.4, =0.0.4, =0.0.1, =0.0.8 Source cves: CVE-2023-22946 Source advisory:...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2023-22946 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2023-22946 Source advisory: OSV:GHSA-329J-JFVR-RHR6...

analytics-zoo (>=0.11.0, <=0.12.0b2022082301), bigdl (>=0.13.0.dev1, <=2.5.0b20240324) +12 more potentially affected by CVE-2023-22946 via pyspark (2.4.6)

pyspark PYPI version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.11.0, =0.13.0.dev1, =0.14.0b20211027, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =0.3.0, =0.2.1, =0.4.1 Source cves:...

awsglue-local (>=0.9.1, <=1.0.2), ceja (0.1.0) +13 more potentially affected by CVE-2023-22946 via pyspark (2.4.8)

pyspark PYPI version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - awsglue-local =0.9.1, =0.2.1, =0.0.12, =0.1.0, =0.1.0, =1.3.1, =2.0.0b0, =1.0.2rc1, =2.4.0rc1, =0.0.2, =0.2.0, =0.5.1 Source cves: CVE-2023-22946...

abi-ds-utils (>=0.1.2, <=0.1.9), abi-pyspark-utils (>=0.1.1, <=0.1.4) +140 more potentially affected by CVE-2023-22946 via pyspark (>=3.0.0, <=3.3.1)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.1.5, =0.0.1, =0.0.2, =1.0.0, =0.12.0.dev0, =2.0.0, =2.0.0, =2.0.0, =2.4.0 and more Source cves: CVE-2023-22946 Source advisory: GHSA-329J-JFVR-RHR6...

eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) potentially affected by CVE-2023-22946 via pyspark (2.1.2)

pyspark PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2023-22946 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...