Parquet Java
Approved changes feed: RSS · Atom
cpe:2.3:a:apache:parquet_java:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Apache (b0303047-b7dd-5cf8-abcc-71b7d9d80b95) |
|---|---|
| Product | Parquet Java (162fa04e-d870-5d20-9184-ec7fbb2ab797) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:apache/parquet |
purl2cpe | 2026-06-01 10:14:31.083558 |
pkg:github/apache/parquet-java |
purl2cpe | 2026-07-28 16:41:03.494624 |
pkg:maven/org.apache.parquet/parquet |
purl2cpe | 2026-06-01 10:14:31.083560 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-30065 |
vulnerable | 2026-06-08 07:16:59.025627 |
Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadata
Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code
Users are recommended to upgrade to version 1.15.1, which fixes the issue.
Published: 2025-04-01T07:53:42.993Z
Updated: 2026-02-26T18:29:05.414Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-41561 |
vulnerable | 2026-06-08 05:35:20.736785 |
Apache Parquet-MR potential DoS in case of malicious Parquet file
Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.
Published: 2021-12-20T11:20:11.000Z
Updated: 2024-08-04T03:15:29.260Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.