parquet vulnerabilities and fixes
Recent CVEs affecting parquet, with upgrade or downgrade steps. 1 tracked.
parquet has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2026-09-09. Highest priority: CVE-2026-73334 (score 41/100).
- CVE-2026-73334 HIGH 8.1 UPGRADE Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12
FAQ
How do I fix parquet vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is parquet being exploited right now?
None of the tracked parquet CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which parquet CVE should I patch first?
CVE-2026-73334 currently ranks highest (41/100): Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12.