repository icon
apache / spark Project repository

Apache Spark - A unified analytics engine for large-scale data processing

Submit a report

FIRST INTERACTION

WITHIN51 DAYS

REVIEW

WITHIN77 DAYS

FIX

WITHINN/A DAYS

Unsafe torch.load in LogisticRegressionModel._load_core_model allows remote code...
snakeyworm
duplicate
None
RCE via cloudpickle.loads on base64 serializedClass in UserDefinedType.fromJson...
snakeyworm
duplicate
Critical
Path traversal via unsafe tarfile.extract during PySpark installation — exploita...
snakeyworm
duplicate
High
Unauthenticated Java Deserialization RCE via Spark Connect gRPC ( SparkSerDeUtil...
fg0x0
duplicate
Critical
PySpark RCE via UserDefinedType.fromJson() Unsafe cloudpickle Deserialization
ryansecurityfanpierlabs
duplicate
High
Path traversal via unsafe tarfile.extract during PySpark installation — exploita...
wormysnake
duplicate
High
RCE via cloudpickle.loads on base64 serializedClass in UserDefinedType.fromJson...
wormysnake
duplicate
Critical
Remote Code Execution via unsafe `torch.load()` without `weights_only=True` in P...
lolbotym
duplicate
High
Unsafe torch.load without weights_only in PySpark ML model deserialization
manja316
duplicate
High
Spark Connect Security Guard Bypass Leading to Arbitrary File Write on Driver
arrester
pending
Server-side request forgery in Spark standalone master reverse proxy allows acce...
mickeyjoes
pending
Code Injection via Unsanitized f-string Interpolation in FunctionPickler.create_...
aditya4727
pending
Authentication bypass via `getStreamManager()` + path traversal in `NettyStreamM...
souta40524052
pending
SQL Injection via unescaped comment and index name in JDBC dialect queries
souta40524052
pending
SSRF via missing external entity restriction in XSD SchemaFactory (ValidatorUtil...
souta40524052
pending
Arbitrary Code Execution via Dynamic Import + CloudPickle Fallback in UserDefine...
tranhoangtu-it
duplicate
High
Arbitrary Code Execution via Unsafe Dynamic Import in PySpark ML Model Loading (...
tranhoangtu-it
pending
Cross-Site Request Forgery (CSRF) on Application/Driver Kill Endpoints
arrester
duplicate
Medium
Stored XSS via Unescaped Task Error Messages in Spark Web UI Stage Page
souta40524052
duplicate
Medium
Unsafe Handling of User-Supplied Configuration Leading to Potential Command Inje...
navneettsinghh
pending
Silent TLS Certificate Validation Bypass via Credulous Trust Manager Fallback
elitezonej-jith
pending
Unauthenticated Remote Code Execution via Java Deserialization in Spark Connect...
nishalindass
duplicate
Critical
Information Disclosure: Sensitive Strings in Classpath Entries Bypass Redaction...
hermesslipt
pending
Stored XSS in StagePage Event Timeline allows rogue executor to execute JavaScri...
tulgaaaaaaaa
duplicate
Medium
SQL Injection in getTableCommentQuery() allows Spark SQL user to execute arbitra...
tulgaaaaaaaa
pending
Auth token bypass via timing side-channel in AccumulatorServer string comparison
nhomyk
pending
Stored XSS via innerHTML in Spark executor UI
nhomyk
pending
RCE via pickle.loads() and cloudpickle.loads() in distributed serializers, broad...
nhomyk
pending
Apache Spark JDBC V2 Catalog SQL Injection Vulnerability in apache/spark
pedrovgcruz-cmyk
pending
RCE via torch.load() in PySpark ML LogisticRegressionClassifier — Unsafe Deseria...
odysseypro25-project
duplicate
High
Unsafe torch.load() in PySpark ML LogisticRegressionClassifier enables RCE via m...
theoddesseyp-ai
duplicate
High
Unsafe Java deserialization via Spark Connect gRPC ScalarScalaUDF payload allows...
eistee82
pending
Path Traversal in NettyStreamManager — Arbitrary File Read
osamahamad
pending
SQL Injection via Unescaped `comment` in `getSchemaCommentQuery`
osamahamad
pending
SQL Injection via Unescaped `tableName` in MSSQL `sp_rename`
osamahamad
pending
SQL Injection via Unescaped `indexName` in MySQL `indexExists`
osamahamad
pending
SQL Injection via Unescaped `tableComment` in JDBC Dialects
osamahamad
pending
Stored XSS via Executor ID/Hostname in Timeline — CSP Bypass
osamahamad
duplicate
Medium
XSS via X-Forwarded-Context (CSP Bypass)
osamahamad
pending
Arbitrary code execution via unsafe torch.load() without weights_only=True in Py...
elucidator-hky
self closed
Tar Slip vulnerability in PySpark installation script via unsafe tarfile.extract...
elucidator-hky
self closed
LDAP Injection in LdapAuthenticationProviderImpl via Unsanitized Username Input
professor-13
pending
Unauthenticated Remote Code Execution via REST Submission API
appsecguardian-hash
pending
SQL Injection via JDBC `tableComment` Option in Apache Spark
appsecguardian-hash
pending
Reflected XSS via X-Forwarded-Context Header Injection
appsecguardian-hash
pending
Unrestricted OS Command Execution via SQL TRANSFORM clause with no disable mecha...
hack1ll
pending
Unsafe deserialization via cloudpickle and pickle in PySpark broadcast, serializ...
etwithin
pending
Unauthenticated request-body exhaustion DoS in Spark Standalone Master REST subm...
4ur0n
pending
Unauthenticated Standalone REST submission allows remote code execution on Spark...
maru1009
pending
Spark Connect trusts client-supplied user_id/session_id across multiple RPC hand...
4ur0n
pending
Runtime override of internal ArtifactManager config allows arbitrary file write...
eigentum
duplicate
High
History Server app-level event-log download can authorize against attempt 1 but...
saamsuz
pending
Remote Spark Connect client can enable a test-only local-destination file-copy f...
saamsuz
pending
Stored XSS via Executor Host in History Server Stage Timeline (CSP Bypass)
duddnr0615k
pending
Arbitrary Class Instantiation and Path Traversal via Untrusted Model Metadata in...
wernerina
duplicate
High
SQL Injection in Apache Spark JDBC Data Source
alrightryanx
pending
Command Injection Vulnerability in Apache Spark Launcher
vishnuraj-r
pending
Remote Code Execution (RCE) via Insecure Deserialization in Spark Standalone and...
sebas5207418
not applicable
Remote Code Execution via Unsafe cloudpickle Deserialization in PySpark UserDefi...
galanzi2580-wq
pending
Remote Code Execution via Malicious PyTorch Model Loading in Spark Connect ML
akhmittra
duplicate
Critical
Unsafe PyTorch Model Deserialization (torch.load) Leading to RCE in Spark ML Con...
akhmittra
self closed
Spark Connect trusts client-supplied userId (no server-side validation) enabling...
theagentknownasren-gif
pending
Spark Connect trusts client-supplied userId (no server-side validation) enabling...
theagentknownasren-gif
pending
Apache Spark NettyBlockRpcServer Unsafe Deserialization Remote Code Execution
mia-718ai
pending
SQL Injection in Spark SQL Literal.sql() via VariantVal Type Parameter
mia-718ai
pending
Apache Spark Web UI X-Forwarded-Context Header Injection leads to Reflected XSS
mia-718ai
pending
Apache Spark Web UI Cross-Site Request Forgery (CSRF) Vulnerability in Job/Stage...
mia-718ai
pending
Apache Spark NettyBlockRpcServer UploadBlock RPC Missing Authorization - Arbitra...
mia-718ai
pending
Apache Spark RPackageUtils.extractRFolder() Zip Slip Path Traversal Arbitrary Fi...
mia-718ai
pending
Pickle RCE in Apache Spark PySpark Serializers
l3ster1337
self closed
Reflected XSS in Spark Web UI pagination (PagedTable)
turborigby
self closed
Remote Code Execution via Insecure pickle.load() and cloudpickle.load() Deserial...
sermikr0
pending
Privilege Escalation via Unsafe 'bash -c' Implementation in Spark SQL TRANSFORM...
ahmetartuc
self closed
Unauthenticated RCE in Apache Spark via REST API Environment Injection (LD_PRELO...
mada2aa
informative
Critical
Authentication Bypass in Spark Shuffle Service via Missing Client ID Validation
mada2aa
duplicate
Critical
Missing Authentication in Apache Spark Thrift Server - Allows Unauthenticated SQ...
nikshacks
informative
Critical
Remote Code Execution via Pickle Deserialization in Apache Spark PySpark
nikshacks
duplicate
Critical
Remote Code Execution via pickle.load in pyspark/broadcast.py
pulkitgoyal18
informative
Medium
Critical RCE via Insecure Deserialization in Multiple PySpark MLlib load() Funct...
advisory1-lab
informative
Critical
Insecure Java Deserialization in Checkpoint Recovery
chawdamrunal
self closed
Apache Spark Authentication Bypass Vulnerability
elexs1zz
informative
High
Unsafe out-of-bounds memory write in UTF8StringBuilder.appendBytes() in Apache S...
bahaashawish1
spam
Stored XSS in Apache Spark Web UI via Application Name
ohmymagic
pending
Http Security Filter
jusdon713
informative
High
Remote Command Injection via Unvalidated git Command Composition in merge_spark_...
echooriginai
informative
Critical
Remote Command Injection in Apache Spark merge_spark_pr.py via Unvalidated Git R...
echooriginai
self closed
Unsafe model loading through PySpark ML Connect may lead to RCE
sch227
informative
High
Command Injection in Apache Spark's RDD.pipe() allows arbitrary shell execution...
anreddykarthikreddy3003
not applicable
Arbitrary File Write via Tar Extraction (Path Traversal)
hope4real
spam
Command Injection in ProcessBuilder
hope4real
not applicable
Improper Neutralization of Special Elements used in an OS Command
ralph13
informative
High
A member of the Apache org with permission to push code into Spark project has l...
edivangalindo
not applicable
Inefficient Regular Expression Complexity
ready-research
self closed
Code Injection
anon-artist
spam
huntr: apache/spark