Vulnerabilities of Apache Software Foundation Apache Avro Java SDK
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2025-33042 | Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific… | Not rated | Feb 13, 2026 |
| CVE-2024-47561 | Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code | 9.2 Critical | Oct 3, 2024 |
| CVE-2023-39410 | When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed… | Not rated | Sep 29, 2023 |