Apache Parquet, a columnar storage file format, ... Those that are unable to upgrade their Apache Parquet instances to version 1.15.1 straight away are advised to avoid untrusted Parquet files, ...

A flaw in code for handling Parquet, Apache’s open-source columnar data file format, allows attackers to run arbitrary code on vulnerable instances. The vulnerability, tracked as CVE-2025-30065 ...

That being said, if upgrading to Apache Parquet 1.15.1 immediately is impossible, it is suggested to avoid untrusted Parquet files or carefully validate their safety before processing them.

Apache Atlas, Parquet progress; ... The new 1.80 release of Parquet MR (a set of Java Libraries for working with Parquet files) is really just a maintenance release addressing two bugs.

Researchers claim Apache Parquet was carrying a maximum-severity flaw It allows threat actors to run arbitrary code A patch was released, and users are urged to apply it Apache Parquet, a columnar ...