4 matches found
AZL-110001 CVE-2026-92287 affecting package libarrow 15.0.0-9
Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1. This affects users who read Parquet files and configure Parquet decryption properties with a KmsClient implementation. On the reader side, the KMS URL can be application-controlled...
5.7AI score0.00217EPSS
SaveExploits0References1
20