VYPR

rpm package

opensuse/python-pandas&distro=openSUSE Tumbleweed

pkg:rpm/opensuse/python-pandas&distro=openSUSE%20Tumbleweed

Vulnerabilities (1)

  • CVE-2023-47248CriNov 9, 2023
    affected < 3.0.3-1.2fixed 3.0.3-1.2

    Deserialization of untrusted data in IPC and Parquet readers in PyArrow versions 0.14.0 to 14.0.0 allows arbitrary code execution. An application is vulnerable if it reads Arrow IPC, Feather or Parquet data from untrusted sources (for example user-supplied input files). This vul