Restrict trusted packages in the parquet-avro module

[wgtmac]

Describe the enhancement requested

See the parity of Apache Avro: https://issues.apache.org/jira/browse/AVRO-3985

Component(s)

Avro

[socketz]

Hi @wgtmac, is this related to CVE-2025-30065? I think is excessive CVSS Score because you need some conditions not easily achievable to get a successful exploitation.
In my opinion it should be this score: CVSS 4.0 - 9 (CRITICAL)

[torque59]

Looking for related PR and commit information for CVE-2025-46762