Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:maven/org.apache.avro/avro@1.8.2
purl pkg:maven/org.apache.avro/avro@1.8.2
Next non-vulnerable version 1.11.4
Latest non-vulnerable version 1.12.1
Risk score 4.4
Vulnerabilities affecting this package (2)
Advisory Summary Fixed in package version
GHSA-r7pg-v2c8-mfg3
Aliases:
CVE-2024-47561
Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK) Schema parsing in the Java SDK of …
1.11.4
Not vulnerable
GHSA-rhrv-645h-fjfh
Aliases:
CVE-2023-39410
Apache Avro Java SDK vulnerable to Improper Input Validation When deserializing untrusted or corrupted data, it is possible for a …
1.11.3
Vulnerable
Vulnerabilities fixed by this package (1)

Advisory Summary Aliases
CVE-2018-10237
Unbounded memory allocation in Google Guava 11.0 through 24.x before 24.1.1 allows remote attackers to conduct denial of service attacks …