Vulnerabilities for pyarrow

First version without a known vulnerability: 0.2.0

Details

• GHSA-rgxp-2hwp-jwgg2026-02-17

  Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering

  Fixed in: 23.0.1

• PYSEC-2024-1612024-11-28

  Deserialization of untrusted data in IPC and Parquet readers in the Apache Arrow R package versions 4.0.0 through 16.1.0 allows arbitrary code execution. An application is vulnerable if it

  Fixed in: 801de2fbcf5bcbce0c019ed4b35ff3fc863b141b, 17.0.0

• GHSA-5wvp-7f3h-6wmm2023-11-09

  PyArrow: Arbitrary code execution when loading a malicious data file

  Fixed in: 14.0.1

• GHSA-8cw2-jv5c-c8252022-05-24

  Missing Initialization of Resource in Apache Arrow

  Fixed in: 0.15.1, 0.15.0

• GHSA-cjw4-2w9r-r8mv2022-05-24

  Missing Initialization of Resource in Apache Arrow

  Fixed in: 0.15.1, 0.15.0