The vulnerability, tracked as CVE-2025-30065, is a deserialization issue (CWE-502) in Parquet’s Java library that allows execution of maliciously crafted Parquet files.

A total of 24 JEPs in JDK 24 extend stream processing, introduce quantum-resistant algorithms and provide an API for accessing class files. Java 24 has been released at the start of the JavaOne ...