Поиск уязвимостей
Количество 8
Количество 8
ALT-PU-2026-19780
ALT-PU-2026-19780: package `python3-module-avro` update to version 1.11.5-alt1
CVE-2025-33042
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.
CVE-2025-33042
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.
CVE-2024-47561
Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.
CVE-2024-47561
Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.
GHSA-rp46-r563-jrc7
Apache Avro Java SDK is Vulnerable to Code Injection
GHSA-r7pg-v2c8-mfg3
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)
BDU:2024-07817
Уязвимость библиотеки сериализации данных Apache Avro связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путём внедрения специально сформированной схемы данных
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2026-19780 ALT-PU-2026-19780: package `python3-module-avro` update to version 1.11.5-alt1 | CVSS3: 7.3 | 9 месяцев назад | |
 | CVE-2025-33042 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue. | CVSS3: 5.6 | 1% Низкий | 9 месяцев назад |
 | CVE-2025-33042 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue. | CVSS3: 7.3 | 1% Низкий | 9 месяцев назад |
| CVE-2024-47561 Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue. | CVSS3: 8.8 | 3% Низкий | около 2 лет назад |
| CVE-2024-47561 Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue. | CVSS3: 7.3 | 3% Низкий | около 2 лет назад |
| GHSA-rp46-r563-jrc7 Apache Avro Java SDK is Vulnerable to Code Injection | 1% Низкий | 9 месяцев назад | |
| GHSA-r7pg-v2c8-mfg3 Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK) | CVSS3: 9.8 | 3% Низкий | около 2 лет назад |
 | BDU:2024-07817 Уязвимость библиотеки сериализации данных Apache Avro связана с недостатками механизма десериализации. Эксплуатация уязвимости может позволить нарушителю, действующему удалённо, выполнить произвольный код путём внедрения специально сформированной схемы данных | CVSS3: 7.3 | 3% Низкий | около 2 лет назад |
Уязвимостей на страницу