Apache Software Foundation Apache Parquet Java

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2025-46762≤ 1.15.1Apache Parquet Java: Potential malicious code execution from trusted packages in the parquet-avro module when reading an Avro schema from…HIGH 7.11.6 %
CVE-2025-30065≤ 1.15.0Apache Parquet Java: Arbitrary code execution in the parquet-avro module when reading an Avro schema from a Parquet file metadataCRITICAL 10.044 %