Do Son Protect your Spark clusters: Apache Livy 0.9.0 patches two important file access and path traversal vulnerabilities (CVE-2025-60012 & CVE-2025-66249).
Apache Spark
Critical Apache Uniffle flaw CVE-2025-68637 (CVSS 9.1) exposes Big Data clusters to MITM attacks. Update to v0.10.0 immediately to secure traffic.
Stay informed about the security flaw CVE-2024-23945 in Apache Hive and Apache Spark. Understand the impact and learn how to mitigate the risks.
CVE-2023-22946 arises when applications use the spark-submit feature to specify a 'proxy-user' to run as, which limits privileges
Spark released the latest security bulletin, which contains a shell command injection vulnerability (CVE-2022-33891). The severity is important