Pyarrow (Apache Software Foundation) - vulnerabilities (CVEs)

2 CVEs, 1 in the last 30 days, 1 known versions, newest CVE from 2026-10-20. Vendor: Apache Software Foundation.

CVEs of Pyarrow

• CVE-2026-92287, 2026-10-20: Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and…
• CVE-2023-47248 - CVSS 9.8 (critical), 2023-11-09: Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is…