AP
Product
Apache-airflow-providers-apache-spark
3
CVEs
0
On KEV
7.5
Max CVSS
0
New 30D
Severity mix
Critical 0High 2Medium 1Low 0
Watch
Add Apache-airflow-providers-apache-spark to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-40272 | 7.5 | Aug 17 | Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing a connection giving… Affected: before 4.1.3 |
| CVE-2023-28710 | 7.5 | Apr 7 | Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before 4.0.1 Affected: before 4.0.1 |
| CVE-2022-40954 | 5.5 | Nov 22 | Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow allows an attacker to… Affected: before 4.0.0 |
Showing 3