HIGH7.5Go
GHSA-mc57-h6j3-3hmv· CVE-2026-46384, GO-2026-5047iskorotkov/avro: Integer Overflow in Decoder
Modified: 9/10/2026
package
Go/github.com/iskorotkov/avro/v2
pkg:go/github.com/iskorotkov/avro/v2
HIGH7.5Go
GHSA-mx64-mj3q-7prj· GO-2026-5048iskorotkov/avro: Denial-of-Service Vulnerability in Decoder
Modified: 9/10/2026
HIGH7.5Go
GHSA-w8j3-pq8g-8m7w· CVE-2026-46385, GO-2026-5046iskorotkov/avro: CPU Exhaustion in Decoder
Modified: 9/10/2026
—Go
GO-2026-5046· CVE-2026-46385, GHSA-w8j3-pq8g-8m7wCPU exhaustion in Avro decoder in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Modified: 8/5/2026
—Go
GO-2026-5047· CVE-2026-46384, GHSA-mc57-h6j3-3hmvInteger overflow in Avro decoder in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Modified: 8/5/2026
—Go
GO-2026-5048· GHSA-mx64-mj3q-7prjDenial of service via unbounded map allocations in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Modified: 8/5/2026