1161 matches found
GO-2025-3787 vulnerabilities
Vulnerabilities for packages: dive, docker-cli-buildx, traefik-fips, opa-envoy, splunk-otel-collector, cg, docker-cli-buildx-fips, grype, spire-server, grafana, opa-fips, steampipe, wolfictl, pluto, aws-otel-collector-fips, chart-testing-fips, amazon-cloudwatch-agent, docker-compose-fips,...
GO-2021-0066 vulnerabilities
Vulnerabilities for packages: spark-operator...
GO-2021-0064 vulnerabilities
Vulnerabilities for packages: kubeflow-pipelines, spark-operator, gostatsd, newrelic-nri-statsd...
GO-2024-2994 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, local-static-provisioner, cri-tools, kubeflow-pipelines, ip-masq-agent, spark-operator, kubernetes-csi-driver-hostpath, k8s-device-plugin...
GO-2023-2341 vulnerabilities
Vulnerabilities for packages: kubernetes-dns-node-cache, nodetaint, prometheus-adapter, aws-efs-csi-driver, ip-masq-agent, spark-operator...
GO-2024-2746 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, local-static-provisioner, kubeflow-pipelines, ip-masq-agent, kubernetes, spark-operator, kubernetes-csi-driver-hostpath...
GO-2025-3465 vulnerabilities
Vulnerabilities for packages: argocd-image-updater, kubernetes-dns-node-cache, aws-efs-csi-driver, nodetaint, vcluster, emissary, rancher-fleet, yunikorn-k8shim, local-static-provisioner, ip-masq-agent, kubernetes, spark-operator, kapp, kubernetes-csi-driver-hostpath, kubernetes-csi-driver-nfs,...
GO-2026-5039 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, argocd-image-updater, cloud-sql-proxy, nova, local-path-provisioner, vault-k8s, zarf, paranoia, rekor, temporal-ui-server, containerd, crossplane-provider-family-azure, glab, falco-no-driver, libnvidia-container,...
GO-2023-2153 vulnerabilities
Vulnerabilities for packages: slsa-verifier, up, buildkitd, dgraph, terraform-provider-sendgrid, cortex, aactl, kubeflow, k3d, spark-operator, scorecard, src, kubevela, kubescape...
GO-2026-4340 vulnerabilities
Vulnerabilities for packages: docker-machine-driver-linode, grpcurl, ferretdb, crossplane-provider-aws-iam, fluxcd-kustomize-mutating-webhook, spire-controller-manager, gitleaks, nri-mongodb, local-path-provisioner, vault-k8s, paranoia, timescaledb-parallel-copy, crossplane-provider-sql,...
GO-2025-3955 vulnerabilities
Vulnerabilities for packages: cloud-sql-proxy, dive, spire-controller-manager, nova, cluster-api-provider-vsphere, kubernetes-csi-driver-nfs, mockgen, rabbitmq-messaging-topology-operator, containerd, wait-for-port, libnvidia-container, nginx-prometheus-exporter, nri-consul,...
CVE-2026-18428
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...
CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...
CVE-2026-18428
CVE-2026-18428 affects the OpenSearch SQL plugin’s Flint extension query handler. A SQL query validation bypass allows a remote authenticated actor with async query access to send a crafted query to the direct query endpoint and potentially execute arbitrary code on Apache Spark workers. The vuln...
EUVD-2026-58178
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...
CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query
A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...
CLEANSTART-2026-OI56852 Security fixes in spark-sc213-jdk17-py312 3.4.4-r1
Package spark-sc213-jdk17-py312 version 3.4.4-r1 fixes 26 vulnerabilities: CVE-2024-47561, ghsa-rhrv-645h-fjfh, CVE-2023-39410, ghsa-r7pg-v2c8-mfg3, CVE-2024-7254...
CLEANSTART-2026-OX23337 Security fixes in spark 3.5.9-r1
Package spark version 3.5.9-r1 fixes 12 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-rmj7-2vxq-3g9f...