CVE-2026-56741 vulnerabilities

Vulnerabilities for packages: spark, apache-camel-karavan-devmode, zookeeper-fips, hadoop-client-modules, druid, apache-pulsar, tez, apache-hop-fips, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, zookeeper, kafka, apache-nifi, pinot-fips, pinot, apache-pulsar-fips,...

CVE-2026-56740 vulnerabilities

Vulnerabilities for packages: spark, apache-camel-karavan-devmode, zookeeper-fips, hadoop-client-modules, druid, apache-pulsar, tez, apache-hop-fips, spark-kubernetes-operator, spark-kubernetes-operator-fips, spark-fips, zookeeper, kafka, apache-nifi, pinot-fips, pinot, apache-pulsar-fips,...

CVE-2026-44180

CVE-2026-44180 affects Jupyter Enterprise Gateway: ContainerProcessProxy._enforce_prohibited_ids can be bypassed to run kernels as root by supplying KERNEL_UID/KERNEL_GID values with whitespace. Affected versions: 2.0.0rc1 through

CVE-2026-15183

Multiple input validation vulnerabilities in the Snowflake Spark Connector spark-snowflake versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, execute arbitrary SQL with the connector's Snowflake role, or redirect COPY operations to attacker-controlled storage. An...

CVE-2026-15183

The CVE concerns the Snowflake Spark Connector (spark-snowflake) prior to version 3.2.1, where multiple input-validation issues enable attackers to exfiltrate OAuth client credentials, run arbitrary SQL under the connector’s Snowflake role, or redirect COPY operations to attacker-controlled stora...

CVE-2026-15183 Input Validation Vulnerabilities in Snowflake Spark Connector

Multiple input validation vulnerabilities in the Snowflake Spark Connector spark-snowflake versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, execute arbitrary SQL with the connector's Snowflake role, or redirect COPY operations to attacker-controlled storage. An...

EUVD-2026-43644

Multiple input validation vulnerabilities in the Snowflake Spark Connector spark-snowflake versions prior to 3.2.1 can allow attackers to exfiltrate OAuth client credentials, execute arbitrary SQL with the connector's Snowflake role, or redirect COPY operations to attacker-controlled storage. An...

PYSEC-2026-1141 Apache Airflow Spark Provider Improper Input Validation vulnerability

Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving an opportunity to read files on the Airflow server. It is recommended to upgrade to a version that is not affected...

PYSEC-2026-1140 Apache Airflow Spark Provider vulnerable to improper input validation

Apache Software Foundation Apache Airflow Spark Provider before 4.0.1 is vulnerable to improper input validation because the host and schema of JDBC Hook can contain / and ? which is used to denote the end of the field...

PYSEC-2026-770 OS Command Injection in Apache Airflow

Improper Neutralization of Special Elements used in an OS Command 'OS Command Injection' vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to read arbtrary files in the task execution context, without write access to DAG files. This issue affects Spark Provider...

CVE-2026-50193 vulnerabilities

Vulnerabilities for packages: spark, druid...

GHSA-3WRR-7QPF-2PRH vulnerabilities

Vulnerabilities for packages: spark, druid...

CVE-2026-50010 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, management-api-for-apache-cassandra-5.0, solr, spark, tinkerpop, strimzi-kafka-operator-fips, cassandra, sonarqube, druid, grpc-java-fips, neo4j, request-9047-keycloak-fips, seata, elasticsearch-fips, apache-pulsar, flyway, logstash, tez, logstash-fips...

GHSA-C653-97M9-RCG9 vulnerabilities

Vulnerabilities for packages: camunda-zeebe, management-api-for-apache-cassandra-5.0, solr, spark, tinkerpop, strimzi-kafka-operator-fips, cassandra, sonarqube, druid, grpc-java-fips, neo4j, request-9047-keycloak-fips, seata, elasticsearch-fips, apache-pulsar, flyway, logstash, tez, logstash-fips...

GHSA-4GRM-H2QV-H6W6 vulnerabilities

Vulnerabilities for packages: spark, apache-hop...

GHSA-4GRM-H2QV-H6W6 vulnerabilities

Vulnerabilities for packages: spark...

CVE-2026-50009 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-CQ4Q-CV5G-R8Q5 vulnerabilities

Vulnerabilities for packages: spark...

CVE-2026-48748 vulnerabilities

Vulnerabilities for packages: spark...

GHSA-563Q-J3CM-6JXM vulnerabilities

Vulnerabilities for packages: infinispan, spark, apache-pulsar, thingsboard, celeborn, neo4j, sonarqube, druid, kserve-modelmesh, strimzi-kafka-operator, management-api-for-apache-cassandra-5.0, docker-selenium, flyway...