Known Vulnerabilities for Avro by Avro Project
Listed below are 1 of the newest known vulnerabilities associated with "Avro" by "Avro Project".
These CVEs are retrieved based on exact matches on listed software, hardware, and vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed software information are still displayed.
Data on known vulnerable versions is also displayed based on information from known CPEs
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2026-46385 json | iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled ... | Not Provided | 2026-05-29 | 2026-07-22 |
| CVE-2026-46384 json | iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values f... | Not Provided | 2026-05-29 | 2026-07-22 |
| CVE-2023-37475 json | Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-crafted s... | 7.5 - HIGH | 2023-07-17 | 2023-07-26 |
| CVE-2022-36124 json | It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. Th... | 7.5 - HIGH | 2022-08-09 | 2026-06-23 |