Known vulnerabilities in apache-airflow-providers-apache-spark

Vendor: Apache Foundation
Software: apache-airflow-providers-apache-spark
Software CPE: cpe:2.3:a:apache_foundation:apache-airflow-providers-apache-spark:*:*:*:*:*:apache_airflow:*:*
Website: https://www.apache.org
Total vulnerabilities: 2
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting apache-airflow-providers-apache-spark apache-airflow-providers-apache-spark is affected by 2 known vulnerabilities: 1 medium, 1 low Critical High Medium Low

Vulnerabilities (2)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU74609 - Exposure of sensitive information to an unauthorized actor
CVE-2023-28710		 CWE-200 Low
No
No
 4.0.1 10.04.2023 SB2023041014
#VU69477 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2022-40954		 CWE-78 Medium
No
No
 4.0.0 22.11.2022 SB2022112213