Iskorotkov vulnerabilities
We track 2 vulnerabilities in Iskorotkov products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on May 29, 2026.
2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score
Latest Iskorotkov vulnerabilities
- 7.5 High severity
avro: Uncontrolled Resource Consumption
iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count a
- 7.5 High severity
avro: Integer Overflow or Wraparound
iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-in