{"action":"Upgrade pyarrow to 14.0.1 or later.","affected":[{"fixed":"14.0.1","introduced":"0.14.0"}],"component":"pyarrow","cve_ids":["CVE-2023-47248"],"ecosystem":"PyPI","epss":0.14528,"exploited":false,"fixed_versions":["14.0.1"],"ghsa_id":"GHSA-5wvp-7f3h-6wmm","id":"tcs_01M5KF1YV0KBV9KJJQ9K3TX4G0","modified_at":"2026-09-10T03:50:04.164494775Z","published_at":"2023-11-09T09:30:26Z","references":["https://osv.dev/vulnerability/GHSA-5wvp-7f3h-6wmm","https://nvd.nist.gov/vuln/detail/CVE-2023-47248","https://github.com/apache/arrow/commit/f14170976372436ec1d03a724d8d3f3925484ecf","https://github.com/advisories/GHSA-5wvp-7f3h-6wmm","https://github.com/apache/arrow","https://github.com/pypa/advisory-database/tree/main/vulns/pyarrow/PYSEC-2023-238.yaml","https://lists.apache.org/thread/yhy7tdfjf9hrl9vfrtzo8p2cyjq87v7n","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FR34AIPXVTMB3XPRU5ULV5HHWPMRE33X","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MAGWEAJDWO2ACYATUQCPXLSYY5C3L3XU","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/MWFYXLVBTBHNKYRXI572RFX7IJDDQGBL","https://pypi.org/project/pyarrow-hotfix","https://www.cve.org/CVERecord?id=CVE-2023-47248","https://www.openwall.com/lists/oss-security/2023/11/08/7"],"severity":{"label":"critical","score":9.8},"sources":[{"source":"osv","source_id":"GHSA-5wvp-7f3h-6wmm","url":"https://osv.dev/vulnerability/GHSA-5wvp-7f3h-6wmm"}],"summary":"PyArrow: Arbitrary code execution when loading a malicious data file"}