evaporation (>=0.1.0, <=1.0.0), hspatial (>=0.1.0, <=2.1.3) +4 more potentially affected by CVE-2026-8213 via gdal (2.4.4)

gdal PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - evaporation =0.1.0, =0.1.0, =0.0.4, =1.0.16, =0.9.0, =0.9.1 Source cves: CVE-2026-8213 Source advisory: OSV:PYSEC-2026-2157...

evaporation (>=0.1.0, <=1.0.0), hspatial (>=0.1.0, <=2.1.3) +4 more potentially affected by CVE-2026-8088 via gdal (2.4.4)

gdal PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on gdal and may be impacted: - evaporation =0.1.0, =0.1.0, =0.0.4, =1.0.16, =0.9.0, =0.9.1 Source cves: CVE-2026-8088 Source advisory: OSV:GHSA-J3F5-RW74-G4RV...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2025-55039 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2025-55039 Source advisory: OSV:PYSEC-2025-184...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2023-22946 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

nuna-sql-tools (>=0.0.13, <=0.0.17), pydeequ (0.1.5) +1 more potentially affected by CVE-2023-22946 via pyspark (2.4.7)

pyspark PYPI version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - nuna-sql-tools =0.0.13, =0.0.17 - pydeequ 0.1.5 - pyrasterframes 0.9.1 Source cves: CVE-2023-22946 Source advisory: OSV:PYSEC-2023-44...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

elasticpedia (>=1.0.0, <=1.0.1), ml-hadoop-experiment (0.0.1) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.4)

pyspark PYPI version 2.4.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - elasticpedia =1.0.0, =0.1.0, =0.8.4, =0.9.0rc2 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2022-33891 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2022-33891 Source advisory: OSV:GHSA-4X9R-J582-CGR8...

dataland (>=0.1.2, <=0.1.7), pyrasterframes (>=0.8.0.dev0, <=0.8.3.post0) +1 more potentially affected by CVE-2022-33891 via pyspark (2.3.4)

pyspark PYPI version 2.3.4 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - dataland =0.1.2, =0.8.0.dev0, =2.3.0, =2.3.0.post7 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...

nuna-sql-tools (>=0.0.13, <=0.0.17), pydeequ (0.1.5) +1 more potentially affected by CVE-2022-33891 via pyspark (2.4.7)

pyspark PYPI version 2.4.7 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - nuna-sql-tools =0.0.13, =0.0.17 - pydeequ 0.1.5 - pyrasterframes 0.9.1 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...

owl-sanitizer-data-quality (>=0.1.0, <=0.5.0), pyrasterframes (0.9.0) +2 more potentially affected by CVE-2022-33891 via pyspark (2.4.5)

pyspark PYPI version 2.4.5 is affected by a known vulnerability. The following packages have a transitive dependency on pyspark and may be impacted: - owl-sanitizer-data-quality =0.1.0, =0.3.1, =0.3.15 Source cves: CVE-2022-33891 Source advisory: OSV:PYSEC-2022-236...