Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Parquet Java

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2025-30065 Public exploit EPSS 44%

    Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata

    Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to upgrade to version 1.15.1, which fixes the issue.

    Apache Software Foundation Apache Parquet Java org.apache.parquet:parquet-avro Maven