{"url":"https://pypi.sbomify.com/package/pyarrow/23.0.0","markdown_url":"https://pypi.sbomify.com/package/pyarrow/23.0.0.md","name":"pyarrow","version":"23.0.0","purl":"pkg:pypi/pyarrow@23.0.0","summary":"Python library for Apache Arrow","author":null,"project_urls":{"Documentation":"https://arrow.apache.org/docs/python","Homepage":"https://arrow.apache.org/","Issues":"https://github.com/apache/arrow/issues","Repository":"https://github.com/apache/arrow"},"requires_python":">=3.10","license":null,"classifiers":["Programming Language :: Python :: 3.10","Programming Language :: Python :: 3.11","Programming Language :: Python :: 3.12","Programming Language :: Python :: 3.13","Programming Language :: Python :: 3.14","Programming Language :: Python :: Free Threading :: 2 - Beta"],"wheels":[{"filename":"pyarrow-23.0.0-cp310-cp310-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/a3/95/f37b6a252fdbf247a67a78fb3f61a529fe0600e304c4d07741763d3522b1/pyarrow-23.0.0-cp310-cp310-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"5ba71f61-038f-59cf-b585-38e61246996a","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5ba71f61-038f-59cf-b585-38e61246996a/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp310-cp310-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/ab/ab/fb94923108c9c6415dab677cf1f066d3307798eafc03f9a65ab4abc61056/pyarrow-23.0.0-cp310-cp310-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"f50d6f07-1086-5b10-a4ae-72e3497d565a","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/f50d6f07-1086-5b10-a4ae-72e3497d565a/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp311-cp311-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/f2/04/464a052d673b5ece074518f27377861662449f3c1fdb39ce740d646fd098/pyarrow-23.0.0-cp311-cp311-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"b12b0e95-7ce7-5a99-99bf-c04dac314b15","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b12b0e95-7ce7-5a99-99bf-c04dac314b15/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp311-cp311-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/f4/1b/32a4de9856ee6688c670ca2def588382e573cce45241a965af04c2f61687/pyarrow-23.0.0-cp311-cp311-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"05f5fb20-e05c-5b56-b270-61100cb65d10","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/05f5fb20-e05c-5b56-b270-61100cb65d10/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp312-cp312-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/10/6e/f08075f1472e5159553501fde2cc7bc6700944bdabe49a03f8a035ee6ccd/pyarrow-23.0.0-cp312-cp312-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"5807ebdd-04b6-5cb1-9389-0c8b6750ed87","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/5807ebdd-04b6-5cb1-9389-0c8b6750ed87/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp312-cp312-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/7d/82/d5a680cd507deed62d141cc7f07f7944a6766fc51019f7f118e4d8ad0fb8/pyarrow-23.0.0-cp312-cp312-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"a2526d8b-95f2-547d-80e6-6dbce06ad6cb","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/a2526d8b-95f2-547d-80e6-6dbce06ad6cb/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp313-cp313-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/c6/ee/34e95b21ee84db494eae60083ddb4383477b31fb1fd19fd866d794881696/pyarrow-23.0.0-cp313-cp313-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"c85b8c4c-eb2d-5616-b181-c3e63fcf1509","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/c85b8c4c-eb2d-5616-b181-c3e63fcf1509/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp313-cp313-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/52/88/8a8d83cea30f4563efa1b7bf51d241331ee5cd1b185a7e063f5634eca415/pyarrow-23.0.0-cp313-cp313-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"9b8057fb-3824-56bc-adb4-a590267b2a57","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/9b8057fb-3824-56bc-adb4-a590267b2a57/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/5a/90/f3342553b7ac9879413aed46500f1637296f3c8222107523a43a1c08b42a/pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"2c747a75-fcf5-5c7c-9d1e-dcad1a19f169","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/2c747a75-fcf5-5c7c-9d1e-dcad1a19f169/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/f3/da/9862ade205ecc46c172b6ce5038a74b5151c7401e36255f15975a45878b2/pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"52f33a31-df1a-5b05-8adb-7680f3b75fae","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/52f33a31-df1a-5b05-8adb-7680f3b75fae/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp314-cp314-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/bb/6e/a72d901f305201802f016d015de1e05def7706fff68a1dedefef5dc7eff7/pyarrow-23.0.0-cp314-cp314-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"caf91998-f7bf-5c32-9fea-50fa062869e5","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/caf91998-f7bf-5c32-9fea-50fa062869e5/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp314-cp314-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/f9/e5/5de029c537630ca18828db45c30e2a78da03675a70ac6c3528203c416fe3/pyarrow-23.0.0-cp314-cp314-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"24b0efdf-3cc1-5f1b-825d-8f2a8e9c14e1","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/24b0efdf-3cc1-5f1b-825d-8f2a8e9c14e1/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl","url":"https://files.pythonhosted.org/packages/61/d9/d1274b0e6f19e235de17441e53224f4716574b2ca837022d55702f24d71d/pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl","sboms":[{"artifact_uuid":"b5d2e63f-953d-55d1-81cf-d6e103f492df","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/b5d2e63f-953d-55d1-81cf-d6e103f492df/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}},{"filename":"pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl","url":"https://files.pythonhosted.org/packages/39/07/e4e2d568cb57543d84482f61e510732820cddb0f47c4bb7df629abfed852/pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl","sboms":[{"artifact_uuid":"6197f069-0f88-5257-a04e-de79458b64c9","path":"pyarrow-23.0.0.dist-info/sboms/auditwheel.cdx.json","format":"CycloneDX/1.4","format_family":"CycloneDX","valid":true,"media_type":"application/vnd.cyclonedx+json","download_url":"https://pypi.sbomify.com/artifact/6197f069-0f88-5257-a04e-de79458b64c9/download","vulnerability_count":1,"scan_error":null}],"attestation":{"status":"not_available"}}],"formats":["CycloneDX"],"sbom_count":14,"has_attestation":false,"vulnerabilities":[{"id":"CVE-2026-25087","aliases":["GHSA-rgxp-2hwp-jwgg","PYSEC-2026-113"],"summary":"Apache Arrow: Potential use-after-free when reading IPC file with pre-buffering","severity":"high","score":7.0,"package":"pyarrow","version":"23.0.0","ecosystem":"PyPI","purl":"pkg:pypi/pyarrow@23.0.0?file_name=pyarrow-23.0.0-cp310-cp310-musllinux_1_2_aarch64.whl","fixed":["23.0.1"],"url":"https://insights.sbomify.com/CVE-2026-25087/","wheels":["pyarrow-23.0.0-cp310-cp310-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp310-cp310-musllinux_1_2_x86_64.whl","pyarrow-23.0.0-cp311-cp311-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp311-cp311-musllinux_1_2_x86_64.whl","pyarrow-23.0.0-cp312-cp312-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp312-cp312-musllinux_1_2_x86_64.whl","pyarrow-23.0.0-cp313-cp313-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp313-cp313-musllinux_1_2_x86_64.whl","pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp313-cp313t-musllinux_1_2_x86_64.whl","pyarrow-23.0.0-cp314-cp314-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp314-cp314-musllinux_1_2_x86_64.whl","pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_aarch64.whl","pyarrow-23.0.0-cp314-cp314t-musllinux_1_2_x86_64.whl"]}],"vulnerability_scan":{"scanned_sboms":14,"total_sboms":14,"scanned_at":"2026-11-10","scanner":"osv-scanner 2.7.0","severity_counts":{"high":1}}}