A proof-of-concept exploit tool has been publicly released for a maximum severity Apache Parquet vulnerability, tracked as CVE-2025-30065, making it easy to find vulnerable servers.

4] Start installing libraries. Finally, let us go ahead and start installing libraries. We are going to use PIP for the same. It is Python’s package manager that allows you to install, upgrade ...

A flaw in code for handling Parquet, Apache’s open-source columnar data file format, allows attackers to run arbitrary code on vulnerable instances. The vulnerability, tracked as CVE-2025-30065 ...

What happens? DuckDB ignores per-column key-value metadata of Parquet files. To Reproduce. According to e.g. #9798 DuckDB shows in the result of parquet_metadata() the per-column key-value metadata.

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window.