Package · Maven

org.apache.avro:avro-compiler

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

High 7.3

CVE-2025-33042

Apache Avro Java SDK: Code injection on Java generated code

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are re…

Apache Software Foundation Apache Avro Java SDK druid logstash-9.3-iamguarded-compat Wolfi Maven PyPI

Feb 13, 2026