Apache Software Foundation PyArrow

• CVE-2026-92287 High 8.1 Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation 0.4%
• CVE-2023-47248 Unrated PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file 14.5%