StackRadar

CVE-2018-11760

Medium

Advisory

Published 4 Feb 2019In the index since 13 Sept 2026
Severity
Medium
worst across findings
CVSS
5.5
base score, highest
EPSS
0.006
47th percentile
CISA KEV
Not listed
no confirmed exploitation
Charts affected
1
of 17,781 indexed, latest versions
Container images
1
deployed by those charts
Fix available
1 of 1
affected package

Pyspark User Impersonation Vulnerability

Carried by container images the latest versions of 1 of 17,781 indexed charts deploy, on 1 image.

Affected packageAffected versionsFixed inImages
pysparkpypi2.2.02.2.31
OSV records
GHSA-fvxv-9xxr-h7wj
Also known as
PYSEC-2019-169

Charts affected

1 by stars
ChartLatestAffected imagesRadar Score
sparkmicrosoft1.0.41 of 3See more

spark microsoft 1.0.4

1 of the 3 container images this version deploys carry CVE-2018-11760.

Container imageDigestPackageFixed in
dbanda/livy:0.80ca125e68e53
pyspark@2.2.0
2.2.3

Open the chart page →

13,738

Container images carrying it

1 by charts deploying them

A fixed version is listed for 1 of the 1 affected package.

Container imageDigestPackageFixed inUsed by
dbanda/livy:0.80ca125e68e53
pyspark@2.2.0
2.2.3
1

syft 1.42.1 · advisories as of 14 Sept 2026

Corrections: contact@stackradar.io

Catalogue: Artifact Hub · Advisories: OSV · Exploitation: FIRST EPSS, CISA KEV.