← Database

CVE-2025-30065

CRITICAL CVSS: 9.8 Published: 2025-04-01 Modified: 2026-06-17

Description

Schema parsing in the parquet-avro module of Apache Parquet 1.15.0 and previous versions allows bad actors to execute arbitrary code Users are recommended to upgrade to version 1.15.1, which fixes the issue.

Affected Platforms

Apache Parquet Java

Weakness Type

CWE-502

References