Hi all, https://nvd.nist.gov/vuln/detail/CVE-2025-30065 (10.0 critical) has been fixed on the main branch for 1.9+ (upgrade parquet to 1.15.1). Shall we fix on 1.8.x, 1.7.x and 1.6.x?
There's an open issue[1] and PRs for 1.7.x[2] and 1.6.x[3] 1. https://github.com/apache/iceberg/issues/12749 2. https://github.com/apache/iceberg/pull/12778 3. https://github.com/apache/iceberg/pull/12780 Thanks, Manu