https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T12:50:01.165940+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2023-08044 bdu:2023-08044 2026-10-03T12:50:01.329598+00:00 bdu:2023-08044 https://cve.radiocsirt.org/vuln/certfr-2024-avi-0199 certfr-2024-avi-0199 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits IBM</span>. Certaines d'entre el… 2026-10-03T12:50:01.329639+00:00 certfr-2024-avi-0199 https://cve.radiocsirt.org/vuln/cnvd-2024-27496 cnvd-2024-27496 2026-10-03T12:50:01.329661+00:00 cnvd-2024-27496 https://cve.radiocsirt.org/vuln/euvd-2026-216922 EUVD-2026-216922 2026-10-03T12:50:01.329673+00:00 EUVD-2026-216922 https://cve.radiocsirt.org/vuln/fkie_cve-2023-47248 fkie_cve-2023-47248 2026-10-03T12:50:01.329685+00:00

Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files).

This vulnerability only affects PyArrow, not other Apache Arrow implementations or bindings.

It is recommended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dependency requirements to PyArrow 14.0.1 or later. PyPI packages are already available, and we hope that conda-forge packages will be available soon.

If it is not possible to upgrade, we provide a separate package `pyarrow-hotfix` that disables the vulnerability on older PyArrow versions. See https://pypi.org/project/pyarrow-hotfix/ for instructions.

 https://cve.radiocsirt.org/vuln/ghsa-5wvp-7f3h-6wmm GHSA-5wvp-7f3h-6wmm — PyArrow: Arbitrary code execution when loading a malicious data file 2026-10-03T12:50:01.329721+00:00

Affected: PyPI: pyarrow

Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files).

This vulnerability only affects PyArrow, not other Apache Arrow implementations or bindings.

It is recommended that users of PyArrow upgrade to 14.0.1. Similarly, it is recommended that downstream libraries upgrade their dependency requirements to PyArrow 14.0.1 or later. PyPI packages are already available, and we hope that conda-forge packages will be available soon.

If it is not possible to upgrade, maintainers provide a separate package `pyarrow-hotfix` that disables the vulnerability on older PyArrow versions. See https://pypi.org/project/pyarrow-hotfix/ for instructions.

 https://cve.radiocsirt.org/vuln/gsd-2023-47248 gsd-2023-47248 2026-10-03T12:50:01.329750+00:00 gsd-2023-47248 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13431-1 openSUSE-SU-2024:13431-1 — python310-pyarrow-14.0.1-2.1 on GA media 2026-10-03T12:50:01.329761+00:00

python310-pyarrow-14.0.1-2.1 on GA media

 https://cve.radiocsirt.org/vuln/pysec-2023-238 PYSEC-2023-238 2026-10-03T12:50:01.329777+00:00

Affected: PyPI: pyarrow

Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files).

 https://cve.radiocsirt.org/vuln/wid-sec-w-2024-1638 WID-SEC-W-2024-1638 — Oracle Financial Services Applications: Mehrere Schwachstellen 2026-10-03T12:50:01.329795+00:00

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Financial Services Applications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.