Skip to content
OpenAdvisories

Vendor

iskorotkov

2 known vulnerabilities.

Products

avro 2
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2026-46385

    iskorotkov/avro: CPU Exhaustion in Avro Decoder

    iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count …

    iskorotkov avro splunk-otel-collector argo-events Wolfi Go
  • High 8.7
    CVE-2026-46384

    iskorotkov/avro: Integer Overflow in Avro Decoder

    iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-i…

    iskorotkov avro splunk-otel-collector argo-events Wolfi Go