databricks-sqlalchemy version 2.0.3 has:
Requires-Dist: databricks_sql_connector (==4.0.0.b4)
Requires-Dist: pyarrow (>=14.0.1,<17)
Requires-Dist: sqlalchemy (>=2.0.21)
However, CVE-2024-52338 is only resolved in versions of pyarrow 17.0.0 and later.