CVE-2026-73334

A flaw was found in Apache Parquet Hadoop. When processing a Parquet file, if the Key Management Service KMS Uniform Resource Locator URL is controlled by the file and not explicitly set by the application, a vulnerability can arise. An attacker could craft a malicious Parquet file to direct a KM...

The vulnerability of the parquet-avro module for columnar data storage in Apache Parquet Java allows a attacker to execute arbitrary code.

The vulnerability of the parquet-avro columnar storage format for Apache Parquet Java data processing is related to deficiencies in the deserialization mechanism. Exploiting this vulnerability allows an attacker to execute arbitrary code...