PyPI package intelligence

pyarrow Known Exploited Vulnerabilities

Track evidence-backed exploitation affecting the PyPI package pyarrow, including the gap beyond CISA KEV, confidence assessments, and sensor observations.

Total KEVs
1
Known exploited vulnerability affecting pyarrow
In CISA KEV
0
Records also listed in the official catalog
Beyond CISA KEV
1
Additional exploited vulnerabilities absent from CISA KEV
Sensor Observed
0
pyarrow KEVs with sensor-observed exploitation activity

Review pyarrow exploitation against the versions you run

One of the one exploited pyarrow vulnerabilities tracked here are not in CISA KEV.

0%
Covered by CISA
100%
Beyond CISA

Attested pyarrow vulnerabilities

1 known exploited vulnerability affecting this package.

Vulnerability CISA KEV Added
CVE-2023-47248

PyArrow, PyArrow: Arbitrary code execution when loading a malicious data file

 Beyond CISA 09 Jun 2025

Recurring weakness patterns

Deserialization of Untrusted Data account for mapped occurrences across this pyarrow KEV portfolio.

Browse all KEVs →

CWE-502

Deserialization of Untrusted Data

1