iskorotkov güvenlik açıkları (CVE)

iskorotkov için yayımlanan CVE kayıtları, en yenisi üstte. Yeni bir açık çıktığında e-posta almak için takip edin.

2 sonuç

8.7Yüksek

CVE-2026-46385 5 ay önce

iskorotkov/avro: CPU Exhaustion in Avro Decoder

iskorotkov avro; Red Hat Cryostat 4 on RHEL 9; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHeader returns the count …

8.7Yüksek

CVE-2026-46384 5 ay önce

iskorotkov/avro: Integer Overflow in Avro Decoder

iskorotkov avro; Red Hat Cryostat 4 on RHEL 9; Red Hat Multicluster Global Hub 1.4.5; Red Hat Multicluster Global Hub 1.6.5

iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with overflow-prone signed-i…