cve.nowby Sazabi

PyPIPackage

avro

3 known vulnerabilities (2 high, 1 low), with the versions each affects and the releases that fix them.

Latest release: Not known: cve.now hasn't read this package's releases
Newest unaffected release: Not known without release data
Advisories: 3 · 2 high, 1 low

Weekly downloads: 3.2M
Dependents: 192
Registry: PyPI

Advisories 3

CVE-2025-33042High 7.3
Apache Avro Java SDK: Code injection on Java generated code
Affected: fixed in 1.11.5.
CVE-2023-39410Low
Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK
Affected: fixed in 1.11.3.
CVE-2022-36124High 7.5
Memory overconsumption in Avro Rust SDK
Affected: version range not reported.