Skip to main content
cve.nowby Sazabi
← PyPI
PyPIPackage

pyarrow

5 known vulnerabilities (2 critical, 1 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
5 · 2 critical, 1 high
Weekly downloads
108.3M
Dependents
18.5K
Registry
PyPI

Advisories 5

  • Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering

    Affected: from 15.0.0, fixed in 23.0.1.

  • CVE-2024-52338Critical 9.8

    Apache Arrow R package: Arbitrary code execution when loading a malicious data file

    Affected: from 4.0.0, fixed in 17.0.0.

  • PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

    Affected: from 0.14.0, through 14.0.0; from 0.14.0, fixed in 14.0.1.

  • It was discovered that the C++ implementation (which underlies the R, Python and Ruby implementations) of Apache Arrow 0.14.0 to 0.14.1…

    Affected: from 0.14.0, fixed in 0.15.0; from 0.14.0, fixed in 0.15.1.

  • While investigating UBSAN errors in https://github.com/apache/arrow/pull/5365 it was discovered Apache Arrow versions 0.12.0 to 0.14.1…

    Affected: from 0.12.0, fixed in 0.15.1; from 0.12.0, fixed in 0.15.0.