Skip to content
OpenAdvisories

Product · Apache Software Foundation

PyArrow

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.8
    CVE-2023-47248 Public exploit EPSS 15%

    PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

    Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied in…

    Apache Software Foundation PyArrow pyarrow PyPI