CVE-2021-41561: Improper Input Validation

January 6, 2022 (updated April 14, 2023)

Improper Input Validation vulnerability in Parquet-MR of Apache Parquet allows an attacker to DoS by malicious Parquet files. This issue affects Apache Parquet-MR version 1.9.0 and later versions.

References

www.openwall.com/lists/oss-security/2021/12/20/1
github.com/advisories/GHSA-gc67-crq6-hgh5
lists.apache.org/thread/1bjlscbqtfzl160hrm9lnpjpppp5z3zr
nvd.nist.gov/vuln/detail/CVE-2021-41561

Code Behaviors & Features

Detect and mitigate CVE-2021-41561 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →