avro vulnerabilities

1 known vulnerability in avro from Avro Project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  avro: Uncontrolled Resource Consumption

  CVE-2023-37475Jul 17, 2023Hamba

  Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-crafted string passed to avro's `github.com/hamba/avro/v2.Unmarshal()` can throw a `fatal error: runtime: out of memory` which is unrecoverable