NewA calmer, faster ZeroHour — security assessments on articles, story timelines and search from any page.

#apache-parquet

0 stories this week · 0 this month · 1 in 6 months · mostly security

Stories per day · 30 days

1 stories, newest first · one card per story

oss-securitySep 8, 2026

CVE-2026-73334: Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Apache Parquet Hadoop CVE-2026-73334: a file-controlled KMS URL reaches pluggable KmsClients without host validation in parquet-java 1.12 through 1.18.0.

apache-parquet cve-2026-73334

Stories tagged #apache-parquet

CVE-2026-73334: Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation