Threats affecting pkg:cargo/arrow

An out-of-bounds read vulnerability exists in Apache Arrow Rust's ArrayData interface due to improper validation of RunEndEncoded arrays. This flaw affects versions from 33.0.0 through 57.3.1, 58.4.0, 59.3.1, and 60.0.0. The issue is fixed in version 60.1.0 and other specified patch releases.