Workflow

PyPi: Spark-On-K8s

CVE-2024-1135

Transitive

Safety vulnerability ID: 70740

This vulnerability was reviewed by experts

The information on this page was manually curated by our Cybersecurity Intelligence Team.

Created at Apr 16, 2024 Updated at Jul 29, 2024
Scan your Python projects for vulnerabilities →

Advisory

Spark-on-k8s version 0.5.1 upgrades its Gunicorn dependency to address security concerns related to CVE-2024-1135.

Affected package

spark-on-k8s

Latest version: 0.10.1

A Python package to submit and manage Apache Spark applications on Kubernetes.

Affected versions

Fixed versions

Vulnerability changelog

What's Changed
* fix(webserver): fix the websocket URL by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/36
* security: bump aiohttp to avoid CVE-2024-27306 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/37
* security: bump apache-airflow to avoid CVE-2024-31869 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/38
* security: bump gunicorn to avoid CVE-2024-1135 by hussein-awala in https://github.com/hussein-awala/spark-on-k8s/pull/39


**Full Changelog**: https://github.com/hussein-awala/spark-on-k8s/compare/0.5.0...0.5.1

Resources

Use this package?

Scan your Python project for dependency vulnerabilities in two minutes

Scan your application