Apache Livy
3 CVEs affecting Apache Livy. Latest disclosed: 2026-03-13. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-66249 | Medium | 6.3 | 2026-03-13 | Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') vulnerability in Apache Livy. This issue affects Apache Livy: from 0.3.0 before… |
CVE-2025-60012 | Medium | 6.3 | 2026-03-13 | Malicious configuration can lead to unauthorized file access in Apache Livy. This issue affects Apache Livy 0.7.0 and 0.8.0 when connecting to Apache Spark 3… |
CVE-2021-26544 | Medium | 5.4 | 2021-02-20 | Livy server version 0.7.0-incubating (only) is vulnerable to a cross site scripting issue in the session name. A malicious user could use this flaw to access l… |