René's URL Explorer Experiment

{"@context":"https://schema.org","@type":"DiscussionForumPosting","headline":"Security vulnerability of python package: pyarrow (CVE-2023-47248) ","articleBody":"As described by this article regarding CVE-2023-47248: https://securityonline.info/cve-2023-47248-pyarrow-arbitrary-code-execution-vulnerability-a-critical-threat-to-data-analysts/\r\n\r\nhttps://osv.dev/vulnerability/GHSA-5wvp-7f3h-6wmm\r\n\r\nCurrent Pyarrow version in setup.py:   \"pyarrow\u003e=4,\u003c12\",\r\n\r\nOne conflict from a third-party lib:\r\n1. Snowflake dependency:  pyarrow\u003c10.1.0,\u003e=10.0.1 (from snowflake-connector-python[pandas]==3.4.1-\u003efeast (setup.py)). The Snowflake developers are fixing this: https://github.com/snowflakedb/snowflake-connector-python/issues/1802\r\n\r\nWe need to update the pyarrow version to 14.0.1 \r\n\r\nor apply the hotfix:  https://pypi.org/project/pyarrow-hotfix/","author":{"url":"https://github.com/shuchu","@type":"Person","name":"shuchu"},"datePublished":"2023-11-11T00:54:27.000Z","interactionStatistic":{"@type":"InteractionCounter","interactionType":"https://schema.org/CommentAction","userInteractionCount":1},"url":"https://github.com/3832/feast/issues/3832"}