Search Results (1 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2025-33042 1 Apache 1 Avro 2026-02-20 7.3 High
Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and versionĀ 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.