Maven/org.apache.spark:spark-core_2.12 CVE-2025-54920: high 8.8, EPSS 5.42%

Apache Spark: Spark History Server Code Execution Vulnerability

Action: Upgrade org.apache.spark:spark-core_2.12 to 3.5.7 or later.

Affected

Fixed versions

Sources

• osv: GHSA-jwp6-cvj8-fw65#Maven/org.apache.spark:spark-core_2.12
• https://nvd.nist.gov/vuln/detail/CVE-2025-54920
• https://github.com/apache/spark/pull/51312
• https://github.com/apache/spark/pull/51323
• https://github.com/apache/spark
• https://issues.apache.org/jira/browse/SPARK-52381
• https://lists.apache.org/thread/4y9n0nfj7m68o2hpmoxgc0y7dm1lo02s
• http://www.openwall.com/lists/oss-security/2026/03/13/4

CVE-2025-54920 · published 2026-03-16T15:30:41Z · modified 2026-09-10T03:51:00.600107520Z · JSON