https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 17 Oct 2026 04:54:37 +0000 https://cve.radiocsirt.org/vuln/cnvd-2026-14251 cnvd-2026-14251 https://cve.radiocsirt.org/vuln/cnvd-2026-14251 https://cve.radiocsirt.org/vuln/euvd-2026-275997 EUVD-2026-275997 https://cve.radiocsirt.org/vuln/euvd-2026-275997 https://cve.radiocsirt.org/vuln/fkie_cve-2025-60012 <p>Malicious configuration can lead to unauthorized file access in Apache Livy.</p> <p>This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later.</p> <p>A request that includes a Spark configuration value supported from Apache Spark version 3.1 can lead to users gaining access to files they do not have permissions to.</p> <p>For the vulnerability to be exploitable, the user needs to have access to Apache Livy&#39;s REST or JDBC interface and be able to send requests with arbitrary Spark configuration values.</p> <p>Users are recommended to upgrade to version 0.9.0 or later, which fixes the issue.</p> <p>Malicious configuration can lead to unauthorized file access in Apache Livy.</p> <p>This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later.</p> <p>A request that includes a Spark configuration value supported from Apache Spark version 3.1 can lead to users gaining access to files they do not have permissions to.</p> <p>For the vulnerability to be exploitable, the user needs to have access to Apache Livy&#39;s REST or JDBC interface and be able to send requests with arbitrary Spark configuration values.</p> <p>Users are recommended to upgrade to version 0.9.0 or later, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-60012 https://cve.radiocsirt.org/vuln/ghsa-hm8x-rpgg-7855 <p><strong>Affected:</strong> Maven: org.apache.livy:livy-server</p> <p>Malicious configuration can lead to unauthorized file access in Apache Livy.</p> <p>This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later.</p> <p>A request that includes a Spark configuration value supported from Apache Spark version 3.1 can lead to users gaining access to files they do not have permissions to.</p> <p>For the vulnerability to be exploitable, the user needs to have access to Apache Livy&#39;s REST or JDBC interface and be able to send requests with arbitrary Spark configuration values.</p> <p>Users are recommended to upgrade to version 0.9.0 or later, which fixes the issue.</p> <p><strong>Affected:</strong> Maven: org.apache.livy:livy-server</p> <p>Malicious configuration can lead to unauthorized file access in Apache Livy.</p> <p>This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3.1 or later.</p> <p>A request that includes a Spark configuration value supported from Apache Spark version 3.1 can lead to users gaining access to files they do not have permissions to.</p> <p>For the vulnerability to be exploitable, the user needs to have access to Apache Livy&#39;s REST or JDBC interface and be able to send requests with arbitrary Spark configuration values.</p> <p>Users are recommended to upgrade to version 0.9.0 or later, which fixes the issue.</p> https://cve.radiocsirt.org/vuln/ghsa-hm8x-rpgg-7855