{"action":"Upgrade pyspark to 3.4.4 or later.","affected":[{"fixed":"3.4.4","introduced":"0"},{"fixed":"3.5.2","introduced":"3.5.0"}],"component":"pyspark","cve_ids":["CVE-2025-55039"],"ecosystem":"PyPI","epss":0.00205,"exploited":false,"fixed_versions":["3.4.4","3.5.2"],"ghsa_id":"GHSA-6p6v-m64v-jx8q","id":"tcs_01M5KGP2CP25DQPR45H2M9W69X","modified_at":"2026-06-10T17:01:44.915328547Z","published_at":"2025-10-15T08:15:38.460Z","references":["https://osv.dev/vulnerability/PYSEC-2025-184","http://www.openwall.com/lists/oss-security/2025/10/14/11","https://lists.apache.org/thread/zrgyy9l85nm2c7vk36vr7bkyorg3w4qq","https://github.com/advisories/GHSA-6p6v-m64v-jx8q"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"PYSEC-2025-184","url":"https://osv.dev/vulnerability/PYSEC-2025-184"}],"summary":"This issue affects Apache Spark versions before 3.4.4, 3.5.2 and 4.0.0."}