spark-nlp@1.8.2 vulnerabilities

John Snow Labs Spark NLP is a natural language processing library built on top of Apache Spark ML. It provides simple, performant & accurate NLP annotations for machine learning pipelines, that scale easily in a distributed environment.

  • latest version

    5.5.3

  • latest non vulnerable version

  • first published

    6 years ago

  • latest version published

    2 months ago

  • licenses detected

  • Direct Vulnerabilities

    Known vulnerabilities in the spark-nlp package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Race Condition

    spark-nlp is a John Snow Labs Spark NLP is a natural language processing library built on top of Apache Spark ML. It provides simple, performant & accurate NLP annotations for machine learning pipelines, that scale easily in a distributed environment.

    Affected versions of this package are vulnerable to Race Condition when the get session is called as many times as the number of cores on the Driver at the same time and loading the model many times

    How to fix Race Condition?

    Upgrade spark-nlp to version 3.4.0 or higher.

    [,3.4.0)