Threats affecting pkg:cargo/arrow-data

A vulnerability in Apache Arrow Rust's RunEndEncoded arrays allows out-of-bounds reads due to improper validation of array data. This flaw occurs when reading the last value via certain APIs, potentially exposing memory beyond the intended bounds. The issue has been fixed in versions 57.3.2, 58.4.1, 59.3.2, and 60.1.0 by improving validation of RunEndEncoded array contents.