Apache Software Foundation Pyarrow vulnerabilities

• apache software foundation arrow c++, pyarrow +1 more Apache Arrow C++, PyArrow: Parquet file-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation CVE-2026-92287 8.1 HighOctober 20, 2026
• apache pyarrow PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file CVE-2023-47248 Public exploitFix available EPSS 14.5% 9.8 CriticalNovember 9, 2023