Apache Spark: versions, end of support and vulnerabilities
Release branches of Apache Spark with the latest version, the end of support and the vulnerabilities that are still open in the latest version.
The NVD lists 23 vulnerabilities for Apache Spark, 1 of them actively exploited. Last checked on 02/11/2026.
Release branches
Apache Spark 4.3
Latest version: 4.3.0, released on 27/10/2026
End of support: 30/04/2028
No known vulnerability open in 4.3.0
Apache Spark 4.2
Latest version: 4.2.1, released on 21/10/2026
End of support: 11/01/2028
No known vulnerability open in 4.2.1
Apache Spark 4.1
Latest version: 4.1.4, released on 21/10/2026
End of support: 11/06/2027
No known vulnerability open in 4.1.4
Apache Spark 4.0
Latest version: 4.0.5, released on 21/10/2026
End of support: 23/11/2026
No known vulnerability open in 4.0.5
Apache Spark 3.5
Latest version: 3.5.9, released on 12/07/2026
End of support: 30/11/2027
No known vulnerability open in 3.5.9
Apache Spark 3.4
Latest version: 3.4.4, released on 21/10/2024
End of support: 21/10/2024
2 known vulnerabilities open in 3.4.4
Apache Spark 3.3
Latest version: 3.3.4, released on 08/12/2023
End of support: 09/12/2023
4 known vulnerabilities open in 3.3.4
Apache Spark 3.2
Latest version: 3.2.4, released on 09/04/2023
End of support: 09/04/2023
5 known vulnerabilities open in 3.2.4
Apache Spark 3.1
Latest version: 3.1.3, released on 06/02/2022
End of support: 22/08/2022
7 known vulnerabilities open in 3.1.3
Apache Spark 3.0
Latest version: 3.0.3, released on 15/06/2021
End of support: 06/12/2021
10 known vulnerabilities open in 3.0.3
Apache Spark 2.4
Latest version: 2.4.8, released on 09/05/2021
End of support: 09/05/2021
10 known vulnerabilities open in 2.4.8
Apache Spark 2.3
Latest version: 2.3.4, released on 25/08/2019
End of support: 25/08/2019
10 known vulnerabilities open in 2.3.4
Apache Spark 2.2
Latest version: 2.2.3, released on 07/01/2019
End of support: 30/01/2019
10 known vulnerabilities open in 2.2.3
Apache Spark 2.1
Latest version: 2.1.3, released on 26/06/2018
End of support: 26/06/2018
13 known vulnerabilities open in 2.1.3
Apache Spark 2.0
Latest version: 2.0.2, released on 07/11/2016
End of support: 15/12/2016
16 known vulnerabilities open in 2.0.2
Apache Spark 1.6
Latest version: 1.6.3, released on 02/11/2016
End of support: 19/07/2016
15 known vulnerabilities open in 1.6.3
Apache Spark 1.5
Latest version: 1.5.2, released on 09/11/2015
End of support: 21/12/2015
14 known vulnerabilities open in 1.5.2
Apache Spark 1.4
Latest version: 1.4.1, released on 08/07/2015
End of support: 08/09/2015
14 known vulnerabilities open in 1.4.1
Apache Spark 1.3
Latest version: 1.3.1, released on 11/04/2015
End of support: 02/06/2015
14 known vulnerabilities open in 1.3.1
Apache Spark 1.2
Latest version: 1.2.2, released on 05/04/2015
End of support: 05/04/2015
12 known vulnerabilities open in 1.2.2
Apache Spark 1.1
Latest version: 1.1.1, released on 19/11/2014
End of support: 10/12/2014
12 known vulnerabilities open in 1.1.1
Apache Spark 1.0
Latest version: 1.0.2, released on 25/07/2014
End of support: 03/09/2014
12 known vulnerabilities open in 1.0.2
Most recent vulnerabilities of Apache Spark
- CVE-2026-32773, CVSS 3.1: 6.1, 02/09/2026
- CVE-2025-54920, CVSS 3.1: 8.8, 16/03/2026
- CVE-2025-55039, CVSS 3.1: 6.5, 15/10/2025
- CVE-2024-23945, CVSS 3.1: 5.9, 23/12/2024
- CVE-2023-32007, CVSS 3.1: 8.8, 02/05/2023
- CVE-2023-22946, CVSS 3.1: 9.9, 17/04/2023
- CVE-2022-31777, CVSS 3.1: 5.4, 01/11/2022
- CVE-2022-33891, CVSS 3.1: 8.8, actively exploited, 18/07/2022
- CVE-2021-38296, CVSS 3.1: 7.5, 10/03/2022
- CVE-2020-27223, CVSS 3.1: 5.3, 26/02/2021
Get notified
Add Apache Spark with your version and Erseni Patch writes to you about new versions, vulnerabilities in exactly your version and the end of support.
Already have an account? Log in and add Apache Spark