A critical vulnerability (CVE-2025-46762) in Apache Parquet Java allows arbitrary code execution via crafted Parquet files. Affecting all versions up to 1.15.1, it primarily concerns the parquet-avro module. Users should upgrade to version 1.15.2 or adjust settings to mitigate risks. Immediate action is urged for organizations using Apache Parquet in data processing.
DDoS attackers are pouncing on unpatched vulnerabilities
Why seek new attack methods when you can leverage existing, publicly known vulnerabilities? Exploiting these older weaknesses can be more effective, as they are often
