org.apache.spark:spark-assembly_2.10 (0.9.2), org.apache.spark:spark-bagel_2.10 (0.9.2) +10 more potentially affected by CVE-2025-54920 via org.apache.spark:spark-core_2.10 (0.9.2)

org.apache.spark:spark-core2.10 MAVEN version 0.9.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - org.apache.spark:spark-assembly2.10 0.9.2 - org.apache.spark:spark-bagel2.10 0.9.2 -...

com.holdenkarau:spark-testing-base_2.10 (>=2.1.3_0.10.0, <=2.1.3_0.14.0), com.holdenkarau:spark-testing-kafka-0_8_2.10 (>=2.1.3_0.12.0, <=2.1.3_0.14.0) +12 more potentially affected by CVE-2018-17190 via org.apache.spark:spark-core_2.10 (2.1.3)

org.apache.spark:spark-core2.10 MAVEN version 2.1.3 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - com.holdenkarau:spark-testing-base2.10 =2.1.30.10.0, =2.1.30.12.0, =2.1.4, =2.1.9 Source cves:...

com.datastax.spark:spark-cassandra-connector-demos_2.10 (1.1.0-alpha1), com.datastax.spark:spark-cassandra-connector-embedded_2.10 (1.1.0-alpha1) +23 more potentially affected by CVE-2017-12612 via org.apache.spark:spark-core_2.10 (1.0.2)

org.apache.spark:spark-core2.10 MAVEN version 1.0.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - com.datastax.spark:spark-cassandra-connector-demos2.10 1.1.0-alpha1 -...

org.apache.spark:spark-assembly_2.10 (1.0.1), org.apache.spark:spark-bagel_2.10 (1.0.1) +15 more potentially affected by CVE-2017-7678 via org.apache.spark:spark-core_2.10 (1.0.1)

org.apache.spark:spark-core2.10 MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - org.apache.spark:spark-assembly2.10 1.0.1 - org.apache.spark:spark-bagel2.10 1.0.1 -...

com.datastax.spark:spark-cassandra-connector-embedded_2.10 (>=1.2.2, <=1.2.6), com.datastax.spark:spark-cassandra-connector-java_2.10 (>=1.2.2, <=1.2.6) +19 more potentially affected by CVE-2017-7678 via org.apache.spark:spark-core_2.10 (1.2.2)

org.apache.spark:spark-core2.10 MAVEN version 1.2.2 is affected by a known vulnerability. The following packages have a transitive dependency on org.apache.spark:spark-core2.10 and may be impacted: - com.datastax.spark:spark-cassandra-connector-embedded2.10 =1.2.2, =1.2.2, =1.2.2, =0.4.0-m3,...