{"action":"Upgrade pyspark to 3.1.3 or later.","affected":[{"fixed":"3.1.3","introduced":"0"}],"component":"pyspark","cve_ids":["CVE-2021-38296"],"ecosystem":"PyPI","epss":0.01845,"exploited":false,"fixed_versions":["3.1.3"],"ghsa_id":"GHSA-9rr6-jpg7-9jg6","id":"tcs_01M5KGGDA7DYFC1A2Z97XWJ158","modified_at":"2023-12-06T01:01:25.567486Z","published_at":"2022-03-10T09:15:00Z","references":["https://osv.dev/vulnerability/PYSEC-2022-186","https://lists.apache.org/thread/70x8fw2gx3g9ty7yk0f2f1dlpqml2smd","https://github.com/advisories/GHSA-9rr6-jpg7-9jg6"],"severity":{"label":"unknown"},"sources":[{"source":"osv","source_id":"PYSEC-2022-186","url":"https://osv.dev/vulnerability/PYSEC-2022-186"}],"summary":"Apache Spark supports end-to-end encryption of RPC connections via \"spark.authenticate\" and \"spark.network.crypto.enabled\". In versions 3.1.2 and earlier, it uses a bespoke mutual authentication proto"}