Skip to content
OpenAdvisories

Package · Go

github.com/hamba/avro

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 7.5
    CVE-2023-37475

    Attacker-controlled parameter can cause denial of service in hamba avro

    Hamba avro is a go lang encoder/decoder implementation of the avro codec specification. In affected versions a well-crafted string passed to avro's `github.com/hamba/avro/v2.Unmarshal()` can throw a `fatal error: runtime: out of memory` which is unrecoverable…

    hamba avro github.com/hamba/avro/v2 github.com/hamba/avro Go