Skip to content
Advisories.
Packages

Apache Avro security advisories

2 advisories · none critical or high in 12 months · latest Oct 3, 2024

Repository

2 advisories

DateAdvisory
Oct 32024Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)
CVE-2024-47561Critical9.8fixed in 1.11.4
Sep 292023Apache Avro Java SDK vulnerable to Improper Input Validation
CVE-2023-39410High7.5fixed in 1.11.3
About Apache Avro

Data serialization.

Packages watched: org.apache.avro:avro (Maven).

apache/avro

Critical advisories by email

Wednesdays: the week’s critical and high advisories in the AI and data stack, with the fixed versions. Only in weeks that have some.

Double opt-in. Unsubscribe any time.