Hi Team, We have receive CVE-2025-30065 in parquet-avro for out pinot setup. we are using 1.1.0. I want to know whether upgrading pinot to new version 1.3.0 will solve vulnerability. Asking here because I am unable to find it in the release notes.
m
Mayank
06/09/2025, 3:08 PM
The CVE is on Apache Parquet version 1.15.0. I see we have moved to 1.15.2 (1.15.1 already has the fix) in master. You can check what version is used in 1.3.0 (examine the jar)