libarrow | Snyk

Direct Vulnerabilities

Known vulnerabilities in the libarrow package. This does not include vulnerabilities belonging to this package’s dependencies.

Fix vulnerabilities automatically

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Fix for free

Vulnerability	Vulnerable Version
M Allocation of Resources Without Limits or Throttling	*
H Out-of-bounds Read	*
M Unchecked Input for Loop Condition	*
H Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Deserialization of Untrusted Data	*
H Improper Verification of Cryptographic Signature	*
M Allocation of Resources Without Limits or Throttling	*
H CVE-2026-110879	*
H Improper Validation of Integrity Check Value	*
M Cross-site Scripting (XSS)	*
M HTTP Request Smuggling	*
M Server-Side Request Forgery (SSRF)	*
M Server-Side Request Forgery (SSRF)	*
M Server-Side Request Forgery (SSRF)	*
H Improper Verification of Cryptographic Signature	*
H Improper Certificate Validation	*
H Improper Verification of Cryptographic Signature	*
H Allocation of Resources Without Limits or Throttling	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Comparison of Incompatible Types	*
H Allocation of Resources Without Limits or Throttling	*
H Out-of-bounds Write	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Certificate Validation	*
H Allocation of Resources Without Limits or Throttling	*
M Improper Validation of Specified Quantity in Input	*
M HTTP Request Smuggling	*
M Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
M Race Condition	*
M Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
M HTTP Request Smuggling	*
M Unchecked Input for Loop Condition	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Handling of Highly Compressed Data (Data Amplification)	*
M Inefficient Regular Expression Complexity	*
H Allocation of Resources Without Limits or Throttling	*
M Directory Traversal	*
H Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Improper Certificate Validation	*
H Excessive Platform Resource Consumption within a Loop	*
H Improper Certificate Validation	*
H Use of Out-of-range Pointer Offset	*
H Out-of-bounds Read	*
H Expired Pointer Dereference	*
H Out-of-bounds Read	*
H Resource Exhaustion	*
H Out-of-bounds Read	*
H Out-of-bounds Read	*
M HTTP Request Smuggling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
M Improper Validation of Specified Type of Input	*
H Expired Pointer Dereference	*
H Out-of-bounds Read	*
H Improper Certificate Validation	*
M Server-Side Request Forgery (SSRF)	*
M Improperly Controlled Modification of Dynamically-Determined Object Attributes	*
H Allocation of Resources Without Limits or Throttling	*
M Loop with Unreachable Exit Condition ('Infinite Loop')	*
H Out-of-bounds Read	*
H Use After Free	*
M Directory Traversal	*
M Deserialization of Untrusted Data	*
H Excessive Platform Resource Consumption within a Loop	*
H Cross-site Scripting (XSS)	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Allocation of Resources Without Limits or Throttling	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Cross-site Scripting (XSS)	*
H Excessive Platform Resource Consumption within a Loop	*
H Improper Restriction of Recursive Entity References in DTDs ('XML Entity Expansion')	*
H Allocation of Resources Without Limits or Throttling	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*
M Cross-site Scripting (XSS)	*

Vulnerability

Vulnerable Version

Allocation of Resources Without Limits or Throttling