Apache-airflow-providers-apache-spark (Apache) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 17 known versions, newest CVE from 2023-08-17. Vendor: Apache.

CVEs of Apache-airflow-providers-apache-spark

• CVE-2023-40272 - CVSS 7.5 (high), 2023-08-17: Apache Airflow Spark Provider, versions before 4.1.3, is affected by a vulnerability that allows an attacker to pass in malicious parameters when establishing…
• CVE-2023-28710 - CVSS 7.5 (high), 2023-04-07: Improper Input Validation vulnerability in Apache Software Foundation Apache Airflow Spark Provider.This issue affects Apache Airflow Spark Provider: before…
• CVE-2022-40954 - CVSS 5.5 (medium), 2022-11-22: Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') vulnerability in Apache Airflow Spark Provider, Apache Airflow…