Approved changes feed: RSS · Atom

cpe:2.3:a:apache:spark:3.1.1:-:*:*:*:*:*:*

part: a version: 3.1.1 update: -

VendorApache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95)
ProductSpark (6d69b228-2f9b-5076-b21a-9aa52de269ae)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:apache/spark purl2cpe 2026-06-01 10:14:24.162785
pkg:github/apache/spark purl2cpe 2026-06-01 10:14:24.162787
pkg:maven/org.apache.spark/spark-core purl2cpe 2026-06-01 10:14:24.162788

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-27223 vulnerable 2026-06-08 05:23:52.418466 Details available
MEDIUM (5.2)
In Eclipse Jetty 9.4.6.v20170531 to 9.4.36.v20210114 (inclusive), 10.0.0, and 11.0.0 when Jetty handles a request containing multiple Accept headers with a large number of “quality” (i.e. q) parameters, the server may enter a denial of service (DoS) state due to high CPU usage processing those quality values, resulting in minutes of CPU time exhausted processing those quality values.
Published: 2021-02-26T21:55:13.000Z
Updated: 2025-08-20T10:03:37.386Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.