ai.catboost:catboost-spark_3.3_2.12 (>=1.1 <=1.2.10), ai.h2o:sparkling-water-doc_2.12 (>=3.36.1.3-1-3.3 <=3.38.0.4-1-3.3) +146 more potentially affected by CVE-2022-31777 via org.apache.spark:spark-core_2.12 (=3.3.0)

org.apache.spark:spark-core2.12 MAVEN version =3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.12 and may be impacted: - ai.catboost:catboost-spark3.32.12 =1.1, =3.36.1.3-1-3.3, =0.0.1, =5.2.0, =5.3.1, =5.3.1, =5.3.1,...

ai.catboost:catboost-spark_3.3_2.13 (>=1.1.1 <=1.2.10), ch.cern.sparkmeasure:spark-measure_2.13 (>=0.20 <=0.22) +59 more potentially affected by CVE-2022-31777 via org.apache.spark:spark-core_2.13 (=3.3.0)

org.apache.spark:spark-core2.13 MAVEN version =3.3.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.13 and may be impacted: - ai.catboost:catboost-spark3.32.13 =1.1.1, =0.20, =0.9.8-3.3, =1.2.6-3.3, =1.2.1-3.3, =0.27.0,...

PT-2022-20923

Name of the Vulnerable Software and Affected Versions Apache Spark versions 3.2.1 and earlier, 3.3.0 Description A stored cross-site scripting XSS issue allows remote attackers to execute arbitrary JavaScript in the web browser of a user. This is achieved by including a malicious payload into the...