Skip to content
OpenAdvisories

Package · PyPI

pyarrow

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2024-52338

    Apache Arrow R package: Arbitrary code execution when loading a malicious data file

    Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for e…

    Apache Software Foundation Apache Arrow R package kubeflow-pipelines-visualization-server ceph Azure Linux Wolfi PyPI
  • Critical 9.8
    CVE-2023-47248 Public exploit Scanner template EPSS 13%

    PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

    Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied in…

    Apache Software Foundation PyArrow pyarrow PyPI