{"action":"Upgrade pyspark to 2.1.3 (2.1.x) or 2.2.2 (2.2.x) or later.","affected":[{"fixed":"2.2.2","introduced":"2.2.0"},{"fixed":"2.1.3","introduced":"0"}],"component":"pyspark","cve_ids":["CVE-2018-1334"],"ecosystem":"PyPI","epss":0.00509,"exploited":false,"fixed_versions":["2.2.2","2.1.3"],"ghsa_id":"GHSA-6mqq-8r44-vmjc","id":"tcs_01M5KF3RAFDC1Z74FSEZM0J19T","modified_at":"2024-10-21T21:27:08.927152Z","published_at":"2019-03-14T15:41:04Z","references":["https://osv.dev/vulnerability/GHSA-6mqq-8r44-vmjc","https://nvd.nist.gov/vuln/detail/CVE-2018-1334","https://github.com/advisories/GHSA-6mqq-8r44-vmjc","https://github.com/pypa/advisory-database/tree/main/vulns/pyspark/PYSEC-2018-25.yaml","https://lists.apache.org/thread.html/4d6d210e319a501b740293daaeeeadb51927111fb8261a3e4cd60060@%3Cdev.spark.apache.org%3E","https://spark.apache.org/security.html#CVE-2018-1334"],"severity":{"label":"medium","score":4.7},"sources":[{"source":"osv","source_id":"GHSA-6mqq-8r44-vmjc","url":"https://osv.dev/vulnerability/GHSA-6mqq-8r44-vmjc"}],"summary":"Exposure of Sensitive Information to an Unauthorized Actor in Apache Spark"}