apache/parquet-java
View on GitHub ↗ ★ 3,092 Java
Apache Parquet Java
3 mentions on Hacker News by 3 people: 0 stories, 3 comments · first 2025-04-06 · latest 2025-04-06
20082026
-
…way, the safe solution is to just update the library. Or, based on the link shared elsewhere ( https://github.com/apache/parquet-java/compare/apache-parque... ) maybe avoid this library if you can, because the Java-specific code paths seem…
comment by jeroenhd · 2025-04-06 · in Max severity RCE flaw discovered in widely used Apache Parquet -
Better link: https://github.com/apache/parquet-java/pull/3169 If by “classic” you mean “using a language-dependent deserialization mechanism that is wildly unsafe”, I suppose. The surprising part is that Parquet is a fairly modern format…
comment by amluto · 2025-04-06 · in Max severity RCE flaw discovered in widely used Apache Parquet -
When did vulnerability reports get so vague? Looks like a classic serialization bug https://github.com/apache/parquet-java/compare/apache-parque...
comment by g-mork · 2025-04-06 · in Max severity RCE flaw discovered in widely used Apache Parquet