Apache Software Foundation Apache Parquet Hadoop

• CVE-2026-73334 High 8.1 Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation 0.4%