SBOM for pyarrow 23.0.0

Python library for Apache Arrow

Package information

Requires Python
>=3.10
PyPI
pyarrow 23.0.0
Documentation
https://arrow.apache.org/docs/python
Homepage
https://arrow.apache.org/
Issues
https://github.com/apache/arrow/issues
Repository
https://github.com/apache/arrow

Available SBOMs

Read from .dist-info/sboms/ in each wheel.

pyarrow-23.0.0-cp310-cp310-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp310-cp310-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp311-cp311-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp311-cp311-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp312-cp312-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp312-cp312-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp313-cp313-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp313-cp313-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp314-cp314-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp314-cp314-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl

Valid
auditwheel.cdx.json
CycloneDX/1.4 application/vnd.cyclonedx+json 1 known vulnerability
Download

Known vulnerabilities

Components listed in these SBOMs, matched against the OSV database as of 2026-11-10.

Vulnerability Severity Component Fixed in
CVE-2026-25087
Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering
High 7.0 pyarrow 23.0.0
PyPI
23.0.1

Access via TEA

Use the Transparency Exchange API to fetch this SBOM programmatically:

pip install libtea
python -m libtea https://pypi.sbomify.com pkg:pypi/[email protected]