{"action":"Upgrade pyarrow to 0.15.1 or later.","affected":[{"fixed":"0.15.1","introduced":"0.12.0"}],"component":"pyarrow","cve_ids":["CVE-2019-12410"],"ecosystem":"PyPI","epss":0.04608,"exploited":false,"fixed_versions":["0.15.1"],"ghsa_id":"GHSA-cjw4-2w9r-r8mv","id":"tcs_01M5KEJSCYK5NTYDSHS9FS315X","modified_at":"2024-10-21T20:26:49.848433Z","published_at":"2022-05-24T17:00:40Z","references":["https://osv.dev/vulnerability/GHSA-cjw4-2w9r-r8mv","https://nvd.nist.gov/vuln/detail/CVE-2019-12410","https://github.com/advisories/GHSA-cjw4-2w9r-r8mv","https://github.com/apache/arrow","https://github.com/pypa/advisory-database/tree/main/vulns/pyarrow/PYSEC-2019-196.yaml","https://github.com/rubysec/ruby-advisory-db/blob/master/gems/red-arrow/CVE-2019-12410.yml","https://lists.apache.org/thread.html/49f067b1c5fb7493d952580f0d2d032819ba351f7a78743c21126269@%3Cdev.arrow.apache.org%3E","https://lists.apache.org/thread.html/efd8bbf57427d3c303b5316d208a335f8d0c0dbe0dc4c87cfa995073@%3Cannounce.apache.org%3E","http://www.openwall.com/lists/oss-security/2019/11/08/1"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-cjw4-2w9r-r8mv","url":"https://osv.dev/vulnerability/GHSA-cjw4-2w9r-r8mv"}],"summary":"Missing Initialization of Resource in Apache Arrow"}