Threats affecting pkg:nuget/parquetsharp

CVE-2026-42241 is a medium severity vulnerability in the ParquetSharp . NET library versions 18.1.0 up to but not including 23.0.0.1. The issue arises from the DecimalConverter. ReadDecimal method performing a stack allocation using a potentially attacker-controlled size value. If an attacker crafts a decimal column with an excessively large width in a Parquet file, this can cause a stack overflow, potentially crashing the service that reads such files.