dependencies

1. November 9, 202620 min read

   Lakehouse Dependency CVE Ledger, November 2026: Arrow 26.0.1, Parquet Java 1.18.2 and What to Patch First

   Arrow 26.0.1 fixes a critical bundled Brotli CVE in PyArrow wheels, and Parquet Java 1.18.2 bumps its shaded Jackson. What to patch first.

Browse all posts