~ / search / GHSA-gc67-crq6-hgh5

GHSA-gc67-crq6-hgh5

Improper Input Validation in Parquet-MR

Source: GitHub Advisory Database (reviewed) High CVE-2021-41561

Packages

EcosystemPackageAffectedFixed in
Maven org.apache.parquet:parquet >= 1.12.0, < 1.12.2 1.12.2
Maven org.apache.parquet:parquet < 1.11.2 1.11.2

Details

As written in the advisory (Markdown source, shown as plain text).

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.

References

External links from the advisory. They lead to third-party sites.