You are viewing a plain text version of this content. The canonical link for it is here.
Posted to github@arrow.apache.org by "DHDHLZ (via GitHub)" <gi...@apache.org> on 2025/10/12 07:09:44 UTC
[PR] [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析 [arrow]
DHDHLZ opened a new pull request, #47793:
URL: https://github.com/apache/arrow/pull/47793
老师您好！
这是我完成的PyArrow漏洞分析研究报告，包含10个漏洞的详细分析。
## 研究内容
- 完整的漏洞复现环境搭建指南
- 可执行的PoC代码
- 根本原因分析
- 修复方案研究
## 包含的漏洞分析
1. arrow_10054
2. arrow_10560
3. arrow_11855
4. arrow_6874
5. arrow_7077
6. arrow_8105
7. arrow_8911
8. arrow_9504
9. arrow_9768
10. arrow_9920
## 文件位置
所有研究材料都在 `Private_Repository/` 文件夹中，每个漏洞有独立的分析文档。
请老师审阅！
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析 [arrow]
Posted by "DHDHLZ (via GitHub)" <gi...@apache.org>.
DHDHLZ closed pull request #47793: [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析
URL: https://github.com/apache/arrow/pull/47793
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析 [arrow]
Posted by "DHDHLZ (via GitHub)" <gi...@apache.org>.
DHDHLZ commented on PR #47793:
URL: https://github.com/apache/arrow/pull/47793#issuecomment-3394260768
@apache/arrow-committers
@Apache Arrow Team
Hi @apache/arrow-committers,
I accidentally created this PR containing academic research materials
that shouldn't be merged. Could you please help close this PR?
This is just vulnerability research for academic purposes, not actual code fixes.
Thank you!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析 [arrow]
Posted by "github-actions[bot] (via GitHub)" <gi...@apache.org>.
github-actions[bot] commented on PR #47793:
URL: https://github.com/apache/arrow/pull/47793#issuecomment-3394008046
<!--
Licensed to the Apache Software Foundation (ASF) under one
or more contributor license agreements. See the NOTICE file
distributed with this work for additional information
regarding copyright ownership. The ASF licenses this file
to you under the Apache License, Version 2.0 (the
"License"); you may not use this file except in compliance
with the License. You may obtain a copy of the License at
http://www.apache.org/licenses/LICENSE-2.0
Unless required by applicable law or agreed to in writing,
software distributed under the License is distributed on an
"AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY
KIND, either express or implied. See the License for the
specific language governing permissions and limitations
under the License.
-->
Thanks for opening a pull request!
If this is not a [minor PR](https://github.com/apache/arrow/blob/main/CONTRIBUTING.md#Minor-Fixes). Could you open an issue for this pull request on GitHub? https://github.com/apache/arrow/issues/new/choose
Opening GitHub issues ahead of time contributes to the [Openness](http://theapacheway.com/open/#:~:text=Openness%20allows%20new%20users%20the,must%20happen%20in%20the%20open.) of the Apache Arrow project.
Then could you also rename the pull request title in the following format?
GH-${GITHUB_ISSUE_ID}: [${COMPONENT}] ${SUMMARY}
or
MINOR: [${COMPONENT}] ${SUMMARY}
See also:
* [Other pull requests](https://github.com/apache/arrow/pulls/)
* [Contribution Guidelines - Contributing Overview](https://arrow.apache.org/docs/developers/overview.html)
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析 [arrow]
Posted by "DHDHLZ (via GitHub)" <gi...@apache.org>.
DHDHLZ commented on PR #47793:
URL: https://github.com/apache/arrow/pull/47793#issuecomment-3394265242
Hi @apache/arrow-committers,
I'm a student and accidentally created this PR containing academic research materials.
Could you please help close this PR? It's not intended for actual merging.
Thank you for your understanding!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
Re: [PR] [学术研究] PyArrow漏洞分析报告 - 包含10个漏洞详细分析 [arrow]
Posted by "DHDHLZ (via GitHub)" <gi...@apache.org>.
DHDHLZ commented on PR #47793:
URL: https://github.com/apache/arrow/pull/47793#issuecomment-3394273119
@kou @pitrou @wesm @xhochy @jorisvandenbossche
Urgent: Please close this PR! This contains sensitive vulnerability PoC code that was submitted by mistake as academic research. This should not be public.
作为学生，我不小心提交了包含漏洞复现代码的PR，这涉及安全风险，请立即关闭！
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: github-unsubscribe@arrow.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org