← Packages
go-github-apache-arrow-go-arrow
Official Go implementation of Apache Arrow
- Current
- 0+git20260107.bc21918
- Candidate
- b0eb49
- Branch
- main
- Source commit
- bc219186db40ec6966eab91ee2dec24b2ebcfca1
- Observed branch tip
- b0eb492692aad22601794254fa9d90dc9a748e85
- License
- Apache-2.0
Advisory · 4
- Query commit
- bc219186db40ec6966eab91ee2dec24b2ebcfca1OSV
- Source repository
- https://github.com/apache/arrowRPM Source0
Provider matches do not establish RPM applicability. Local patches, bundled dependencies and binary artifacts are not evaluated.
- Summary
- Out-of-Bounds Write in Google Brotli DecoderOSV
- Fixed events
- —OSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 82.6%FIRST
- KEV added
- 2026-10-27CISA
- Ransomware campaign use
- UnknownCISA
- Aliases
- BIT-brotli-2026-111497, BIT-dotnet-2026-111497, BIT-dotnet-sdk-2026-111497, BIT-node-2026-111497, BIT-node-min-2026-111497, BIT-powershell-2026-111497, GHSA-9v8h-qqgm-4m35, GHSA-c9gr-gmg4-2vqv, GO-2026-6888, PYSEC-2026-4322, PYSEC-2026-4323OSV
- KEV
- YesCISA
- CVSS_V4
- CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:NOSV
- Additional references
- 4OSV
- Fixed events
- 801de2fbcf5bcbce0c019ed4b35ff3fc863b141bOSV
- EPSS model date
- 2026-11-09FIRST
- EPSS probability
- 2.33%FIRST
- Returned advisory
- PYSEC-2024-161OSV
- Aliases
- PYSEC-2024-161OSV
- KEV
- NoCISA
- References
- Fix · 801de2fbcf5bWeb · lists.apache.org
Description
Apache Arrow is a development platform for in-memory analytics. It contains a set of technologies that enable big data systems to process and move data fast.
Changelog
PR · 2
Checks
| Monitor | Observation | Last checked |
|---|---|---|
Checked | ||
Checked | ||
Checked | ||
Checked | ||
Not configured No reliable monitor identity/configuration. | — | |
Input changed No reliable monitor identity/configuration. | — | |
Not configured No reliable monitor identity/configuration. | — | |
Checked Repository query; subpackage and local-patch applicability are not evaluated. | Last attempted | |
Not configured No reliable monitor identity/configuration. | — |