{"action":"Upgrade pyspark to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"0"}],"component":"pyspark","cve_ids":["CVE-2021-38296"],"ecosystem":"PyPI","epss":0.01845,"exploited":false,"fixed_versions":["3.1.3"],"ghsa_id":"GHSA-9rr6-jpg7-9jg6","id":"tcs_01M5KFBGZ4QCFYMZBZ591TSX95","modified_at":"2024-10-25T21:03:01.673493Z","published_at":"2022-03-11T00:02:36Z","references":["https://osv.dev/vulnerability/GHSA-9rr6-jpg7-9jg6","https://nvd.nist.gov/vuln/detail/CVE-2021-38296","https://github.com/advisories/GHSA-9rr6-jpg7-9jg6","https://github.com/pypa/advisory-database/tree/main/vulns/pyspark/PYSEC-2022-186.yaml","https://lists.apache.org/thread/70x8fw2gx3g9ty7yk0f2f1dlpqml2smd","https://www.oracle.com/security-alerts/cpujul2022.html"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-9rr6-jpg7-9jg6","url":"https://osv.dev/vulnerability/GHSA-9rr6-jpg7-9jg6"}],"summary":"Authentication Bypass by Capture-replay in Apache Spark"}