Skip to content

GH-754: Remove incomplete, manually-maintained CVE list - #764

Merged
pitrou merged 1 commit into
apache:mainfrom
pitrou:gh754-cve-list
Mar 2, 2026
Merged

GH-754: Remove incomplete, manually-maintained CVE list#764
pitrou merged 1 commit into
apache:mainfrom
pitrou:gh754-cve-list

Conversation

@pitrou

@pitrou pitrou commented Feb 25, 2026

Copy link
Copy Markdown
Member

No description provided.

@pitrou
pitrou requested a review from alamb February 25, 2026 10:29
@github-actions

Copy link
Copy Markdown

Preview URL: https://pitrou.github.io/arrow-site

If the preview URL doesn't work, you may forget to configure your fork repository for preview.
See https://github.com/apache/arrow-site/blob/main/README.md#forks how to configure.

@pitrou
pitrou requested a review from raboof February 25, 2026 10:29

@alamb alamb left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Looks good to me -- thank you @pitrou and @raboof

Comment thread security.md

**Mitigation**: Upgrade to version 0.15.1 or greater.
For security advisories published before 2023, one can use
[a targeted search query](https://www.cve.org/CVERecord/SearchResults?query=%22Apache+Software+Foundation%22+%22arrow%22)

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I also checked that this link works as well 👍

Comment thread security.md

### [CVE-2023-47248](https://www.cve.org/CVERecord?id=CVE-2023-47248): Arbitrary code execution when loading a malicious data file in PyArrow
For security advisories published since 2023, please refer to
[this page](https://security.apache.org/projects/arrow/) maintained by the Apache

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I verified this link is good

Image

@pitrou
pitrou merged commit c00062b into apache:main Mar 2, 2026
4 checks passed
@pitrou
pitrou deleted the gh754-cve-list branch March 2, 2026 14:16
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants