Description
Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Apache Software Foundation | Apache Parquet | 1.9.0 – < Parquet-MR* | Parquet-MR* |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.apache.parquet:parquet | >= 1.12.0, < 1.12.2 | 1.12.2 | GHSA-gc67-crq6-hgh5 |
| Maven | org.apache.parquet:parquet | < 1.11.2 | 1.11.2 | GHSA-gc67-crq6-hgh5 |