Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2016-9177 — MEDIUM severity vulnerability | Release Alert

CVE-2016-9177

MEDIUMCVSS v2

Published

November 4, 2016

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

Directory traversal vulnerability in Spark 2.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.

perwendel/spark

GitHubA simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin

<= 2.5NVD

Spark

Python Package IndexAn easy to use actor model framework in Python

<= 2.5NVD

spark

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

▄▆▂█▁ in your Rust!

<= 2.5NVD

Spark

NuGet GallerySpark is a view engine allowing the HTML to dominate the flow and any code to fit seamlessly.

<= 2.5NVD

Spark

Chocolatey## Spark Spark is an Open Source, cross-platform IM client optimized for businesses and organizations. It features built-in support for group chat, telephony integration, and strong security. It also offers a great end-user experience with features like in-line spell checking, group chat room bookmarks, and tabbed conversations. Combined with the Openfire server, Spark is the easiest and best alternative to using un-secure public IM networks. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know the package is no longer updating correctly.

<= 2.5NVD

spark

RubyGemsAn extension to Speck, providing Rake tasks and pretty test runners.

<= 2.5NVD

spark

NPMOfficial Particle cloud API library.

<= 2.5NVD

apache/spark

GitHubApache Spark - A unified analytics engine for large-scale data processing

<= 2.5NVD