crates.io/arrow: high

`BinaryArray` does not perform bound checks on reading values and offsets

Action: Upgrade arrow to 6.4.0 or later.

cargo update -p arrow --precise 6.4.0

Affected

Fixed versions

Sources

• osv: GHSA-r7cj-wmwv-hfw5
• https://github.com/apache/arrow-rs
• https://github.com/apache/arrow-rs/blob/6.4.0/CHANGELOG.md#640-2021-12-10
• https://rustsec.org/advisories/RUSTSEC-2021-0116.html

published 2022-06-16T23:40:50Z · modified 2023-11-08T04:22:37.632268Z · JSON