GitHub user amnguye created a discussion: [Nuget] [.NET] Possible affected Nuget packages affected by recently resolved CVE-2026-25087
Our Azure.Storage.Blobs package has taken a recent dependency on the [Apache.Arrow Nuget package](https://www.nuget.org/packages/Apache.Arrow), and we received a Github Issue in regards to the 22.1.0 version being flagged as having a vulnerable dependency. https://github.com/Azure/azure-sdk-for-net/issues/63587 We were wondering if the nuget packages were at all affected by the recent reported CVE and if so, what version fixes the CVE. I assumed the CVE was related to this. https://github.com/advisories/ghsa-rgxp-2hwp-jwgg https://arrow.apache.org/blog/2026/02/16/23.0.1-release/ Thanks in advance! GitHub link: https://github.com/apache/arrow/discussions/51899 ---- This is an automatically sent email for [email protected]. To unsubscribe, please send an email to: [email protected]
