https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-13T04:24:19.617110+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2019-10099 CVE-2019-10099 2026-10-13T04:24:19.619377+00:00

Affected: Apache Spark

Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (controlled by spark.maxRemoteBlockSizeFetchToMem); in SparkR, using parallelize; in Pyspark, using broadcast and parallelize; and use of python udfs.

 https://cve.radiocsirt.org/vuln/ghsa-fp5j-3fpf-mhj5 GHSA-fp5j-3fpf-mhj5 — Sensitive data written to disk unencrypted in Spark 2026-10-13T04:24:19.619431+00:00

Affected: Maven: org.apache.spark:spark-core_2.11, PyPI: pyspark

Prior to Spark 2.3.3, in certain situations Spark would write user data to local disk unencrypted, even if spark.io.encryption.enabled=true. This includes cached blocks that are fetched to disk (controlled by spark.maxRemoteBlockSizeFetchToMem); in SparkR, using parallelize; in Pyspark, using broadcast and parallelize; and use of python udfs.