Apache: >> Parquet Java Security Vulnerabilities
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code
Users are recommended to upgrade to version 1.15.1, which fixes the issue.
CVSS Score
9.8
EPSS Score
0.003
Published
2025-04-01
Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
CVSS Score
7.5
EPSS Score
0.006
Published
2021-12-20