PyPI/pyspark CVE-2022-31777: unknown, EPSS 1.64%

A stored cross-site scripting (XSS) vulnerability in Apache Spark 3.2.1 and earlier, and 3.3.0, allows remote attackers to execute arbitrary JavaScript in the web browser of a user, by including a mal

Action: Upgrade pyspark to 3.2.2 or later.

pip install pyspark==3.2.2

Affected

Fixed versions

Sources

• osv: PYSEC-2022-42976
• https://lists.apache.org/thread/60mgbswq2lsmrxykfxpqq13ztkm2ht6q
• https://github.com/advisories/GHSA-43xg-8wmj-cw8h

CVE-2022-31777 · published 2022-11-01T16:15:00Z · modified 2026-06-10T17:01:37.003052396Z · JSON