parquet-avro-rce

This repository does not have a README...

CLEANSTART-2026-FX93262 Schema parsing in the parquet-avro module of Apache Parquet 1

Security vulnerability affects the druid-fips package. Schema parsing in the parquet-avro module of Apache Parquet 1...

CLEANSTART-2026-EL04463 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas

Security vulnerability affects the druid-fips package. Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas...

CVE-2025-30065

CVE-2025-30065 Research Notes This repository is kept intentionally small and readable. It is intended for authorized security research, local validation, and defensive study of CVE-2025-30065 in Apache Parquet / Avro schema handling. The README focuses on repository hygiene, build reproducibilit...

CLEANSTART-2026-VI66132 Schema parsing in the parquet-avro module of Apache Parquet 1

Security vulnerability affects the apache-hive package. Schema parsing in the parquet-avro module of Apache Parquet 1...

CLEANSTART-2026-QF46334 Schema parsing in the parquet-avro module of Apache Parquet 1

Security vulnerability affects the apache-hive package. Schema parsing in the parquet-avro module of Apache Parquet 1...

CLEANSTART-2026-WP62671 Schema parsing in the Java SDK of Apache Avro 1

Security vulnerability affects the apache-hive package. Schema parsing in the Java SDK of Apache Avro 1...

CLEANSTART-2026-UD32913 Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas

Security vulnerability affects the spark-sc213-jdk17-py312 package. Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas...

Security Bulletin: Due to the use of Apache Avro, IBM webMethods Integration Server is vulnerable to CVE-2025-33042

Summary Due to the use of Apache Avro, IBM webMethods Integration Server is vulnerable to CVE-2025-33042 Vulnerability Details CVEID:CVE-2025-33042 DESCRIPTION: Improper Control of Generation of Code 'Code Injection' vulnerability in Apache Avro Java SDK when generating specific records from...

ROOT-APP-GOBINARY-CVE-2026-46385 CVE-2026-46385 in github.com/hamba/avro/v2 - Patched by Root

Root has patched CVE-2026-46385 in the github.com/hamba/avro/v2 package for Root:Go. Multiple fixed versions available...

ROOT-APP-GOBINARY-CVE-2026-46384 CVE-2026-46384 in github.com/hamba/avro/v2 - Patched by Root

Root has patched CVE-2026-46384 in the github.com/hamba/avro/v2 package for Root:Go. Multiple fixed versions available...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108378 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108378 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693577...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108379 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108379 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693578...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108383 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108383 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693579...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108384 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108384 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693580...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108380 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108380 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693582...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108385 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108385 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693583...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108377 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108377 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693584...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108375 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108375 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693585...

confluent-kafka-config (1.1.4), dc-avro (>=0.1.0, <=0.9.1) +4 more potentially affected by CVE-2026-108376 via dataclasses-avroschema (>=0.25.3, <=0.65.7)

dataclasses-avroschema PYPI version =0.25.3, =0.1.0, =0.0.2, =0.1.0, =0.9.2, =0.9.10 Source cves: CVE-2026-108376 Source advisory: SNYK:PYTHON-DATACLASSESAVROSCHEMA-21693575...