{"action":"Upgrade pyarrow to 0.15.1 or later.","affected":[{"fixed":"0.15.1","introduced":"0.14.0"}],"component":"pyarrow","cve_ids":["CVE-2019-12408"],"ecosystem":"PyPI","epss":0.03251,"exploited":false,"fixed_versions":["0.15.1"],"ghsa_id":"GHSA-8cw2-jv5c-c825","id":"tcs_01M5KEJ0THADZ8RZM9QPEHYGYX","modified_at":"2024-10-21T21:26:52.318112Z","published_at":"2022-05-24T17:00:40Z","references":["https://osv.dev/vulnerability/GHSA-8cw2-jv5c-c825","https://nvd.nist.gov/vuln/detail/CVE-2019-12408","https://github.com/pypa/advisory-database/tree/main/vulns/pyarrow/PYSEC-2019-195.yaml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/red-arrow/CVE-2019-12408.yml","https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E","https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-8cw2-jv5c-c825","url":"https://osv.dev/vulnerability/GHSA-8cw2-jv5c-c825"}],"summary":"Missing Initialization of Resource in Apache Arrow"}