spark-3.5-scala-2.13-python-r vulnerabilities

Direct Vulnerabilities

Known vulnerabilities in the spark-3.5-scala-2.13-python-r package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability	Vulnerable Version
L Creation of Temporary File With Insecure Permissions	*
M CVE-2023-42503	*
L Incorrect Permission Assignment for Critical Resource	*
L CVE-2024-29025	*
L Information Exposure	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H CVE-2022-3171	*
L Stack-based Buffer Overflow	*
H CVE-2022-3510	*
L CVE-2025-24970	*
M Improper Handling of Length Parameter Inconsistency	*
M Improper Input Validation	*
M Allocation of Resources Without Limits or Throttling	*
H Files or Directories Accessible to External Parties	*
L GHSA-58qw-p7qm-5rvh	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
L Resource Exhaustion	*
L Out-of-bounds Write	*
H Uncontrolled Recursion	*
H HTTP Request Smuggling	*
H Improper Certificate Validation	*
H Out-of-bounds Write	*
L CVE-2024-25638	*
H Out-of-bounds Write	*
H Resource Exhaustion	*
M Resource Exhaustion	*