HIGH7.5Go
GHSA-9x44-9pgq-cf45· CVE-2023-37475, GO-2023-1930avro vulnerable to denial of service via attacker-controlled parameter
Modified: 9/10/2026
package
Go/github.com/hamba/avro/v2
pkg:go/github.com/hamba/avro/v2
—Go
GO-2023-1930· CVE-2023-37475, GHSA-9x44-9pgq-cf45Unrestricted memory consumption in github.com/hamba/avro
Modified: 2/4/2026
—Go
GO-2026-5046· CVE-2026-46385, GHSA-w8j3-pq8g-8m7wCPU exhaustion in Avro decoder in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Modified: 8/5/2026
—Go
GO-2026-5047· CVE-2026-46384, GHSA-mc57-h6j3-3hmvInteger overflow in Avro decoder in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Modified: 8/5/2026
—Go
GO-2026-5048· GHSA-mx64-mj3q-7prjDenial of service via unbounded map allocations in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Modified: 8/5/2026