Avro Project vulnerabilities
We track 1 vulnerability in Avro Project products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Avro Project vulnerabilities
- 7.5 High severity
avro: Uncontrolled Resource Consumption
Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-crafted string passed to avro's `github.com/hamba/avro/v2.Unmarshal()` can throw a `fatal error: runtime: out of memory` which is unrecoverable