[ https://issues.apache.org/jira/browse/SPARK-19943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Sean Owen resolved SPARK-19943. ------------------------------- Resolution: Duplicate Generally, you wouldn't open a JIRA unless you believed it affected Spark. This is an old CVE, and it says it affects 3.2.1, but you can see we use 3.2.2. The comment in pom.xml even points you to https://issues.apache.org/jira/browse/SPARK-11652 > commons-collections has vulnerability: CVE-2015-6420 > ---------------------------------------------------- > > Key: SPARK-19943 > URL: https://issues.apache.org/jira/browse/SPARK-19943 > Project: Spark > Issue Type: Bug > Components: Spark Core > Affects Versions: 2.0.0, 2.0.1, 2.1.0 > Reporter: meiyoula > > https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6420 -- This message was sent by Atlassian JIRA (v6.3.15#6346) --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@spark.apache.org For additional commands, e-mail: issues-h...@spark.apache.org