AR
Product
Arrow
by Apache · last CVE Oct 22, 2026
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
1
New 30D
Severity mix
Critical 2High 4Medium 0Low 0
Watch

Add Arrow to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-111497
In wildKEVNew
9.8
88%
Oct 22
Out-of-Bounds Write in Google Brotli Decoder
Affected: through 26.0.0; 27.0.0
Showing 1