PVE-2024-99771

Advisory

Pyspark before 3.1.3, equal or above 3.2.0 and below 3.2.2 are vulnerable to arbitrary co…

[This advisory has been limited. Please create a free account to view the full advisory.]

Affected package

Affected versions

Fixed versions

Vulnerability changelog

This vulnerability has no description

Resources

• https://issues.apache.org/jira/browse/SPARK-38631
• https://github.com/apache/spark/commit/057c051285ec32c665fb458d0670c1c16ba536b2
• https://github.com/apache/spark/commit/271b338324e88b0bfc63364937a56305f7b350fc
• https://github.com/apache/spark/commit/b0b226e79c00d8dc1bee2c9b6818000ab8806f80
• https://github.com/apache/spark/commit/fb9c633db950d7af70376ff1d076d36297e21c36
• https://github.com/apache/spark/pull/35946