dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2023-22946 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

hail (>=0.2.14, <=0.2.64), j11hail (0.2.53) +2 more potentially affected by CVE-2023-22946 via pyspark (2.4.1)

pyspark PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - hail =0.2.14, =0.1.0, =0.1.0, =0.1.4 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

analytics-zoo (>=0.5.0, <=0.10.0), bigdl (>=0.11.0, <=0.13.0.dev0) +4 more potentially affected by CVE-2023-22946 via pyspark (2.4.3)

pyspark PYPI version 2.4.3 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.5.0, =0.11.0, =0.1.0, =0.1.2, =0.1.8 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

nuna-sql-tools (>=0.0.13, <=0.0.17), pydeequ (0.1.5) +1 more potentially affected by CVE-2023-22946 via pyspark (2.4.7)

pyspark PYPI version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - nuna-sql-tools =0.0.13, =0.0.17 - pydeequ 0.1.5 - pyrasterframes 0.9.1 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

awsglue-local (>=0.9.1, <=1.0.2), ceja (0.1.0) +13 more potentially affected by CVE-2023-22946 via pyspark (2.4.8)

pyspark PYPI version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - awsglue-local =0.9.1, =0.2.1, =0.0.12, =0.1.0, =0.1.0, =1.3.1, =2.0.0b0, =1.0.2rc1, =2.4.0rc1, =0.0.2, =0.2.0, =0.5.1 Source cves: CVE-2023-22946...

SUSE CVE-2018-11760

When using PySpark , it's possible for a different local user to connect to the Spark application and impersonate the user running the Spark application. This affects versions 1.x, 2.0.x, 2.1.x, 2.2.0 to 2.2.2, and 2.3.0 to 2.3.1...

eskapade-spark (>=0.8.0, <=0.8.2), pytispark (>=1.0.0rc2, <=1.0.1) potentially affected by CVE-2022-33891 via pyspark (2.1.2)

pyspark PYPI version 2.1.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - eskapade-spark =0.8.0, =1.0.0rc2, =1.0.1 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

intake-hive (0.1.0), sparklanes (>=0.2.0, <=0.2.4) potentially affected by CVE-2022-33891 via pyspark (2.3.0)

pyspark PYPI version 2.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - intake-hive 0.1.0 - sparklanes =0.2.0, =0.2.4 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

azureml-webservice-schema (>=0.1.57, <=1.0.33), mmtfpyspark (0.2.7) +1 more potentially affected by CVE-2022-33891 via pyspark (2.3.1)

pyspark PYPI version 2.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - azureml-webservice-schema =0.1.57, =2.0.3, =2.1.1 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2022-33891 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

hail (>=0.2.14, <=0.2.64), j11hail (0.2.53) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.1)

pyspark PYPI version 2.4.1 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - hail =0.2.14, =0.1.0, =0.1.0, =0.1.4 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

elasticpedia (>=1.0.0, <=1.0.1), ml-hadoop-experiment (0.0.1) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.4)

pyspark PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - elasticpedia =1.0.0, =0.1.0, =0.8.4, =0.9.0rc2 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

analytics-zoo (>=0.11.0, <=0.12.0b2022082301), bigdl (>=0.13.0.dev1, <=2.5.0b20240324) +12 more potentially affected by CVE-2022-33891 via pyspark (2.4.6)

pyspark PYPI version 2.4.6 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo =0.11.0, =0.13.0.dev1, =0.14.0b20211027, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =0.3.0, =0.2.1, =0.4.1 Source cves:...

awsglue-local (>=0.9.1, <=1.0.2), ceja (0.1.0) +13 more potentially affected by CVE-2022-33891 via pyspark (2.4.8)

pyspark PYPI version 2.4.8 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - awsglue-local =0.9.1, =0.2.1, =0.0.12, =0.1.0, =0.1.0, =1.3.1, =2.0.0b0, =1.0.2rc1, =2.4.0rc1, =0.0.2, =0.2.0, =0.5.1 Source cves: CVE-2022-33891...

abi-ds-utils (>=0.1.2, <=0.1.9), abi-pyspark-utils (>=0.1.1, <=0.1.4) +118 more potentially affected by CVE-2022-33891 via pyspark (>=2.1.2, <=3.1.2)

pyspark PYPI version =2.1.2, =0.1.2, =0.1.1, =0.5.1, =0.2.0, =1.0.0, =0.9.1, =0.1.57, =0.11.0, =0.14.0b20211027, =2.0.0, =2.5.0b20240324 and more Source cves: CVE-2022-33891 Source advisory: GHSA-4X9R-J582-CGR8...

abi-ds-utils (>=0.1.2, <=0.1.9), abi-pyspark-utils (>=0.1.1, <=0.1.4) +68 more potentially affected by CVE-2022-33891 via pyspark (>=3.0.0, <=3.1.2)

pyspark PYPI version =3.0.0, =0.1.2, =0.1.1, =0.5.1, =1.0.0, =0.12.0.dev0, =2.0.0, =2.0.0, =2.0.0, =2.0.0, =1.0.0, =1.0.0, =1.0.1 - cehrbert 1.5.0 and more Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

anomalywatchdog (>=0.0.2, <=0.0.7), bigdl-dllib-spark321 (2.1.0b202207291) +28 more potentially affected by CVE-2022-33891 via pyspark (>=3.2.0, <=3.2.1)

pyspark PYPI version =3.2.0, =0.0.2, =0.2.1, =1.0.1, =1.0.1, =0.0.6, =0.2.0.dev2, =0.2.0.dev0, =0.2.0.dev2, =0.2.0.dev0, =0.2.0.dev2, =0.2.0, =0.3.0 and more Source cves: CVE-2022-33891 Source advisory: GHSA-4X9R-J582-CGR8...

analytics-zoo (0.4.0) potentially affected by CVE-2022-33891 via pyspark (2.3.2)

pyspark PYPI version 2.3.2 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - analytics-zoo 0.4.0 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2022-33891 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...