Junglewise Threat Intelligence

CVE-2023-28710: PYSEC-2026-1140 - Apache Airflow Spark Provider vulnerable to improper input validation

CVE-2023-28710 · Severity: low · CVSS 3.1 · Published 2026-07-07

Technologies: apache-airflow-providers-apache-spark (PyPI). Vendors: PyPI.

Executive brief

Apache Airflow Spark Provider vulnerable to improper input validation

Affected products

PyPI apache-airflow-providers-apache-spark

Related threats

PYSEC-2026-1141 - Apache Airflow Spark Provider Improper Input Validation vulnerability
PYSEC-2023-156 - Deserialization of Untrusted Data, Inclusion of Functionality from Untrusted Control Sphere vulnerability in Apache Software Foundation Apac