Explore

Latest Releases
Registries
Security Advisories
CollectionsPreview

Theme

releasealert

Security Advisories

CVEs affecting projects tracked on Release Alert, from NVD & OSV.

Privacy Policy
Terms of Service
Contact

CVE-2018-9159 — MEDIUM severity vulnerability | Release Alert

CVE-2018-9159

MEDIUMCVSS v2

Published

March 31, 2018

Affected

8 projects

Assigned by

MITRE

Severity scale

010

Description

In Spark before 2.7.2, a remote attacker can read unintended static files via various representations of absolute or relative pathnames, as demonstrated by file: URLs and directory traversal sequences. NOTE: this product is unrelated to Ignite Realtime Spark.

perwendel/spark

GitHubA simple expressive web framework for java. Spark has a kotlin DSL https://github.com/perwendel/spark-kotlin

< 2.7.2NVD

Spark

Python Package IndexAn easy to use actor model framework in Python

< 2.7.2NVD

spark

Crates.io

More on this CVE

NVD↗GitHub Advisory↗

▄▆▂█▁ in your Rust!

< 2.7.2NVD

Spark

NuGet GallerySpark is a view engine allowing the HTML to dominate the flow and any code to fit seamlessly.

< 2.7.2NVD

Spark

Chocolatey## Spark Spark is an Open Source, cross-platform IM client optimized for businesses and organizations. It features built-in support for group chat, telephony integration, and strong security. It also offers a great end-user experience with features like in-line spell checking, group chat room bookmarks, and tabbed conversations. Combined with the Openfire server, Spark is the easiest and best alternative to using un-secure public IM networks. **Please Note**: This is an automatically updated package. If you find it is out of date by more than a day or two, please contact the maintainer(s) and let them know the package is no longer updating correctly.

< 2.7.2NVD

spark

RubyGemsAn extension to Speck, providing Rake tasks and pretty test runners.

< 2.7.2NVD

spark

NPMOfficial Particle cloud API library.

< 2.7.2NVD

apache/spark

GitHubApache Spark - A unified analytics engine for large-scale data processing

< 2.7.2NVD