What’s Vulnerable › Products

Apache Software Foundation PyArrow vulnerabilities

2 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your Apache Software Foundation PyArrow version is affected

Latest Apache Software Foundation PyArrow vulnerabilities

• CVE-2026-92287 — Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation (CVSS 8.1)
• CVE-2023-47248 — PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file (CVSS 9.8)