Hamba vulnerabilities
We track 1 vulnerability in Hamba products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 17, 2023.
1vulnerabilities
0critical
1high
0exploited
7.5average CVSS score
Latest Hamba vulnerabilities
- 7.5 High severity
avro: Uncontrolled Resource Consumption
Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-crafted string passed to avro's `github.com/hamba/avro/v2.Unmarshal()` can throw a `fatal error: runtime: out of memory` which is unrecoverable