Skip to content
OpenAdvisories

Product · Apache Software Foundation

Apache Fory

11 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.5
    CVE-2026-71559

    Apache Fory: Uncaught panic (remote DoS) in Go meta-string decoder from untrusted metadata

    Deserialization of Untrusted Data vulnerability in the Go implementation of Apache Fory allows an attacker to cause a denial of service by supplying crafted data containing malformed type metadata, which triggers an uncaught panic. This issue affects Apache F…

    Apache Software Foundation Apache Fory
  • High 7.3
    CVE-2026-60080

    Apache Fory: Rust MetaString heap use-after-free

    Use After Free vulnerability in the Rust deserialization logic of Apache Fory. This issue affects Apache Fory from 0.13.0 through 1.3.0. A crafted Fory payload could cause undefined behavior, process crash, or potential memory disclosure. Users are recommende…

    Apache Software Foundation Apache Fory