pyarrow

Mentions · 7d1
Mentions · 30d2
All mentions2
First seenOct 19, 2026
Last mentioned4d ago

Timeline

2 articles · newest first

Brotli CVE-2026-111497 reaches .NET, FFmpeg, ClickHouse, and Arrow

JFrog showed crashes, memory corruption, and an endless loop; a full FFmpeg remote code execution exploit was not shown.

Cyber Security Newsupdated Oct 28, 08:37 UTC · 2d agofirst Oct 26, 06:35 UTC · 4d agoVulnerability 30 sourcesCVE-2026-1114971

Arrow C++ and PyArrow before 26.0.0 forward unvalidated Parquet KMS URLs

Moderate-severity CVE-2026-92287 hits Parquet decryption users of Arrow C++ and PyArrow; 26.0.0 is unaffected.

oss-securityOct 19, 22:36 UTC · 11d agoVulnerabilityCVE-2026-922871

Related CVEs

by mentions

CVE-2026-11149783%9.2
Buffer overflow in Google Brotli decoder 1.0.3–1.2.0
published 8d agoGoogle BrotliKEVPoC ×25
CVE-2026-922878.1
Pass-through of unvalidated KMS URLs to KMS clients in Apache C++ Parquet and PyArrow versions 4.0.0 to 25.0.1
published 10d ago

Appears with

Apachevendor · 2
.NETproduct · 1
Apache Arrow C++product · 1
JFrogorganization · 1
Googlevendor · 1
Node.jsproduct · 1
FFmpegproduct · 1
Sysdig Threat Research Teamorganization · 1
Apache Arrowproduct · 1
libjxlproduct · 1
Brotliproduct · 1
Microsoftvendor · 1
ClickHouseproduct · 1

Entities are extracted by the model from each article. First seen Oct 19, 2026, last mentioned 4d ago. Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.