GO-2024-2994 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, cri-tools, local-static-provisioner, ip-masq-agent, spark-operator, k8s-device-plugin, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, kubernetes-csi-driver-hostpath, aws-efs-csi-driver...

GO-2024-2746 vulnerabilities

Vulnerabilities for packages: kubeflow-pipelines, kubernetes, local-static-provisioner, ip-masq-agent, spark-operator, kubernetes-dns-node-cache, argocd-image-updater, nodetaint, kubernetes-csi-driver-hostpath, aws-efs-csi-driver...

GO-2023-2341 vulnerabilities

Vulnerabilities for packages: ip-masq-agent, spark-operator, prometheus-adapter, kubernetes-dns-node-cache, nodetaint, aws-efs-csi-driver...

GO-2025-3465 vulnerabilities

Vulnerabilities for packages: kubernetes, kubernetes-csi-driver-nfs, local-static-provisioner, ip-masq-agent, rancher-fleet, spark-operator, vcluster, emissary, rancher-webhook, yunikorn-k8shim, kubernetes-dns-node-cache, kapp, argocd-image-updater, nodetaint, kubernetes-csi-driver-hostpath,...

GO-2023-2153 vulnerabilities

Vulnerabilities for packages: cortex, terraform-provider-sendgrid, kubeflow, kubevela, dgraph, kubescape, slsa-verifier, k3d, buildkitd, src, spark-operator, aactl, scorecard, up...

GO-2026-5039 vulnerabilities

Vulnerabilities for packages: crossplane-provider-aws-memorydb, tekton-chains, crossplane-provider-aws-sns, buildah, timoni, dgraph, crossplane-provider-aws-cloudfront, local-path-provisioner, crossplane-provider-azure-managedidentity, secrets-store-csi-driver, telegraf, mattermost,...

GO-2026-4340 vulnerabilities

Vulnerabilities for packages: wave, crossplane-provider-aws-sns, timoni, helm-operator, amass, crossplane-provider-aws-cloudfront, local-path-provisioner, k3d, ferretdb, secrets-store-csi-driver, mattermost, telegraf, nri-mongodb, kubernetes-event-exporter, undock, opentofu, chisel,...

GO-2025-3955 vulnerabilities

Vulnerabilities for packages: tekton-chains, ini-file, helm-operator, dgraph, k3d, cni-plugins, nri-memcached, undock, nodetaint, neuvector-sigstore-interface, opentofu, prometheus-operator, rclone, tflint, pluto, zot, hubble, kubernetes-csi-external-health-monitor, terraform-provider-azapi, dex,...

CVE-2026-18428

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

CVE-2026-18428

CVE-2026-18428 affects the OpenSearch SQL plugin’s Flint extension query handler. A SQL query validation bypass allows a remote authenticated actor with async query access to send a crafted query to the direct query endpoint and potentially execute arbitrary code on Apache Spark workers. The vuln...

EUVD-2026-58178

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

CVE-2026-18428 SQL Query Validation Bypass in OpenSearch Direct Query

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

CLEANSTART-2026-OX23337 Security fixes in spark 3.5.9-r1

Package spark version 3.5.9-r1 fixes 12 vulnerabilities: CVE-2026-54512, CVE-2026-54513, CVE-2026-54514, CVE-2026-54515, ghsa-rmj7-2vxq-3g9f...

CLEANSTART-2026-OI56852 Security fixes in spark-sc213-jdk17-py312 3.4.4-r1

Package spark-sc213-jdk17-py312 version 3.4.4-r1 fixes 26 vulnerabilities: CVE-2024-47561, ghsa-rhrv-645h-fjfh, CVE-2023-39410, ghsa-r7pg-v2c8-mfg3, CVE-2024-7254...

PT-2026-71708

A SQL query validation bypass in the Flint extension query handler in the OpenSearch SQL plugin allows a remote authenticated actor with async query access to execute arbitrary code on Apache Spark workers by sending a crafted SQL query to the direct query endpoint...

GHSA-3F7W-8RR8-F37F vulnerabilities

Vulnerabilities for packages: awx, jupyter-all-spark-notebook...

GHSA-P538-C434-8V24 vulnerabilities

Vulnerabilities for packages: awx, jupyter-all-spark-notebook...

Anthropic’s Opus 5 Is Better at Resisting Prompt Injection

The chart is interesting. On the IPI benchmark, Opus 5 improved over Opus 4.8, reducing the probability of an attacker succeeding within 15 attempts from 5.5% to 2.0%, and from 0.5% to 0.2% on 1 attempt. It also improved on Sonnet 5 5.9% at k=15 and Mythos 5 2.6%, making it the most robust model...

CVE-2026-62391

The security fix for CVE-2025-66518 is incomplete. Any client who can access to Apache Kyuubi Server via Kyuubi frontend protocols can bypass server-side config kyuubi.session.local.dir.allowlist via unprefixed Spark config aliases. This issue affects Apache Kyuubi: from 1.6.0 before 1.12.0. User...