Apache Software Foundation Apache Airflow Spark Provider

• CVE-2023-40195 High 8.8 Apache Airflow Spark Provider Deserialization Vulnerability RCE 1.9%
• CVE-2023-40272 High 7.5 Apache Airflow Spark Provider Arbitrary File Read via JDBC 2.1%
• CVE-2023-28710 High 7.5 Apache Airflow Spark Provider Arbitrary File Read via JDBC 2.2%
• CVE-2022-40954 Medium 5.5 Apache Airflow Spark Provider RCE that bypass restrictions to read arbitrary files 1.4%