{"action":"Upgrade arrow to 6.4.0 or later.","affected":[{"fixed":"6.4.0","introduced":"0"}],"component":"arrow","cve_ids":[],"ecosystem":"crates.io","exploited":false,"fixed_versions":["6.4.0"],"ghsa_id":"GHSA-r7cj-wmwv-hfw5","id":"tcs_01M5KF2ZQ3K1SN35DY5KM7XN1V","modified_at":"2023-11-08T04:22:37.632268Z","published_at":"2022-06-16T23:40:50Z","references":["https://osv.dev/vulnerability/GHSA-r7cj-wmwv-hfw5","https://github.com/apache/arrow-rs","https://github.com/apache/arrow-rs/blob/6.4.0/CHANGELOG.md#640-2021-12-10","https://rustsec.org/advisories/RUSTSEC-2021-0116.html"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-r7cj-wmwv-hfw5","url":"https://osv.dev/vulnerability/GHSA-r7cj-wmwv-hfw5"}],"summary":"`BinaryArray` does not perform bound checks on reading values and offsets"}