bhuvnesh-vcti opened a new issue, #45812:
URL: https://github.com/apache/arrow/issues/45812

   ### Describe the usage question you have. Please include as many useful 
details as  possible.
   
   
   Hi, we recently scanned our python application which uses Pyarrow version 
19.0.1.
   We are getting a security issue action that Pyarrow is using grpc version 
1.51.1 which has high risk KEV.
   I tried digging the files of pyarrow where vunerabilty got detected but not 
able to verify the grpc version used in the particular version of Pyarrow. Can 
you help how to determine the gprc version in Pyarrow 19.0.1?
   
   ```
   appuser@ad3a031e62b5:/app$ pip list| grep pyarrow
   pyarrow               19.0.1
   appuser@ad3a031e62b5:/app$ pip list| grep grpc
   grpcio                1.71.0
   grpcio-tools          1.71.0
   appuser@ad3a031e62b5:/app$ 
   ```
   
   <img width="1410" alt="Image" 
src="https://github.com/user-attachments/assets/dd8d94b3-e664-4d1e-a649-0bfa755f97d5";
 />
   
   <img width="1469" alt="Image" 
src="https://github.com/user-attachments/assets/bb754773-d104-4f74-8938-b1804ad3271b";
 />
   
   ### Component(s)
   
   Python


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: issues-unsubscr...@arrow.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org

Reply via email to