Cherno.x

icon location BeiJing icon location Security Engineer and RedTeam

Results 1 issues of Cherno.x

🚨 Security Vulnerability: Remote Code Execution via eval() in ParquetArrayParser

1 comment

## Summary A critical Remote Code Execution (RCE) vulnerability exists in DGL's `ParquetArrayParser.read()` method, which uses `eval()` to parse shape metadata from Parquet files without proper validation. An attacker who...