Corona scan shows KEV high risk for pyarrow 19.0.1 for grpc version.

[bhuvnesh-vcti]

Describe the usage question you have. Please include as many useful details as possible.

Hi, we recently scanned our python application which uses Pyarrow version 19.0.1.
We are getting a security issue action that Pyarrow is using grpc version 1.51.1 which has high risk KEV.
I tried digging the files of pyarrow where vunerabilty got detected but not able to verify the grpc version used in the particular version of Pyarrow. Can you help how to determine the gprc version in Pyarrow 19.0.1?

appuser@ad3a031e62b5:/app$ pip list| grep pyarrow
pyarrow               19.0.1
appuser@ad3a031e62b5:/app$ pip list| grep grpc
grpcio                1.71.0
grpcio-tools          1.71.0
appuser@ad3a031e62b5:/app$ 

Component(s)

Python