org.apache.parquet.crypto.keytools:parquet-hadoop vulnerabilities

CVEs whose affected-version data names the org.apache.parquet.crypto.keytools:parquet-hadoop package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-73334High· 8.1

2w ago

Apache Parquet Hadoop: File-controlled KMS URL is forwarded to pluggable KmsClient that skips host validation

Potential problem for users of the org.apache.parquet.crypto.keytools package in Apache Parquet, versions 1.12 to 1.18. This package enables users to encrypt Parquet files via an envelope encryption mechanism that wraps (encrypts) data …

▾ TwilightApache Software Foundation · org.apache.parquet.crypto.keytools:parquet-hadoopEPSS 0.36%via CVEORG