2 matches found
CVE-2025-30065
CVE-2025-30065 : In Apache Parquet, the parquet-avro module (affecting Parquet 1.15.0 and earlier) allows arbitrary code execution due to schema parsing issues. Upgrading to Parquet 1.15.1 fixes the issue. The vulnerability arises from deserialization of untrusted data during schema translation f...
CVE-2021-41561
CVE-2021-41561 is an issue in Apache Parquet-MR where improper input validation can be exploited to cause a denial of service by processing specially crafted Parquet files. The vulnerability targets Parquet-MR and is stated to affect version 1.9.0 and later. Connected sources corroborate the same...