The ASF patched Apache security vulnerabilities with new Apache security fixes for Syncope, Arrow, and Fineract, including critical flaw CVE-2026-64618.
Apache Arrow
CVE-2023-47248 in PyArrow, the Python bindings for Apache Arrow, could allow attackers to execute arbitrary code on vulnerable systems