PyPI/ibis-framework: critical
Ibis PyArrow dependency allows arbitrary code execution when loading a malicious data file
Action: Upgrade ibis-framework to 7.1.0 or later.
pip install ibis-framework==7.1.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 7.1.0 | - |
Fixed versions
| 7.1.0 |
Sources
- osv: GHSA-x563-6hqv-26mr
- https://github.com/ibis-project/ibis/security/advisories/GHSA-x563-6hqv-26mr
- https://github.com/ibis-project/ibis/commit/0fa1e5dc06783c01e912e8de4d7e10186ca0e364
- https://github.com/ibis-project/ibis
- https://github.com/ibis-project/ibis/releases/tag/7.1.0
published · modified · JSON