{"id":"CVE-2024-47561","aliases":["CLSA-2025-1765325273","CLSA-2026-1774225177","CLSA-2026-1778633128","CLSA-2026-1778633130","CLSA-2026-1778719546","CLSA-2026-1780966325","CLSA-2026-1794253414","EUVD-2024-3126","GHSA-r7pg-v2c8-mfg3","GHSA-rhrv-645h-fjfh","GHSA-rp46-r563-jrc7","JLSEC-2026-1374","OESA-2024-2227","RHLW-2026-4051ab209e8865e6","RHLW-2026-41bd2185e6d22e15","RHLW-2026-6dd67008e326a981","RHSA-2024:10207","RHSA-2024:10208","RHSA-2024:7811","ROOT-APP-MAVEN-CVE-2024-47561"],"status":"published","title":"Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.","severity":{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.03256,"percentile":0.88532,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-502"],"published":"2024-10-03T10:23:16Z","modified":"2026-11-10T01:15:03Z","fixes":[{"ecosystem":"Maven","package":"org.apache.avro:avro","fixed_in":["1.11.4"],"sources":["ghsa","osv"]},{"ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","fixed_in":["1.11.3-tuxcare.1","1.11.0-tuxcare.2"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP4","package":"avro","fixed_in":["1.10.2-6.oe2203sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP3","package":"avro","fixed_in":["1.10.2-6.oe2203sp3"],"sources":["osv"]},{"ecosystem":"openEuler:20.03-LTS-SP4","package":"avro","fixed_in":["1.10.2-6.oe2003sp4"],"sources":["osv"]},{"ecosystem":"openEuler:22.03-LTS-SP1","package":"avro","fixed_in":["1.10.2-6.oe2203sp1"],"sources":["osv"]},{"ecosystem":"openEuler:24.03-LTS","package":"avro","fixed_in":["1.10.2-6.oe2403"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-avro","fixed_in":["0:1.11.4-1.redhat_00001.1.el7eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-avro","fixed_in":["0:1.11.4-1.redhat_00001.1.el8eap"],"sources":["osv"]},{"ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-avro","fixed_in":["0:1.11.4-1.redhat_00001.1.el9eap"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"io.root.org.apache.avro:avro","fixed_in":["1.11.1-root.io.1","1.9.2-root.io.1","1.9.2-root.io.2","1.7.7-root.io.1","1.7.7-root.io.2","1.11.1-root.io.2","1.9.2-root.io.3","1.11.3-root.io.1","1.11.0-root.io.1"],"sources":["osv"]},{"ecosystem":"Root:Maven","package":"org.apache.avro:avro","fixed_in":["1.7.7-aikido.2","1.11.1-aikido.2","1.9.2-aikido.3","1.11.3-aikido.1","1.11.0-aikido.1"],"sources":["osv"]}],"affected":[{"source":"ghsa","ecosystem":"Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4"}]}]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-archetypes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-codegen-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-grpc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-integration-test","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc-jetty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc-netty","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-mapred","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-perf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-service-archetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-test-custom-conversions","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-thrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-toplevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.10.2"},{"fixed":"1.10.2-tuxcare.2"}]}],"versions":["1.10.2","1.10.2-tuxcare.1"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.3"},{"fixed":"1.11.3-tuxcare.1"}]}],"versions":["1.11.3"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-archetypes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-mapred","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-service-archetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-thrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-toplevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.6"},{"fixed":"1.7.6-tuxcare.1"}]}],"versions":["1.7.6"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-archetypes-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-ipc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-mapred","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-maven-plugin","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-parent","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-protobuf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-service-archetype","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-thrift","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-toplevel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:trevni-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.7.7"},{"fixed":"1.7.7-tuxcare.1"}]}],"versions":["1.7.7"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.8.2"},{"fixed":"1.8.2-tuxcare.1"}]}],"versions":["1.8.2"],"bundled":2},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.0"},{"fixed":"1.11.0-tuxcare.2"}]}],"versions":["1.11.0","1.11.0-tuxcare.1"]},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.1"},{"fixed":"1.11.1-tuxcare.1"}]}],"versions":["1.11.1"],"bundled":3},{"source":"osv","ecosystem":"TuxCare:Maven","package":"org.apache.avro:avro-compiler","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.11.1"},{"fixed":"1.11.1-tuxcare.1"}]}],"versions":["1.11.1"],"bundled":3},{"source":"osv","ecosystem":"Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.4"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.11.0","1.11.1","1.11.2","1.11.3","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2"]},{"source":"osv","ecosystem":"Julia","package":"Avro_jll","ranges":[{"type":"SEMVER","events":[{"introduced":"0"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP4","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-6.oe2203sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP3","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-6.oe2203sp3"}]}]},{"source":"osv","ecosystem":"openEuler:20.03-LTS-SP4","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-6.oe2003sp4"}]}]},{"source":"osv","ecosystem":"openEuler:22.03-LTS-SP1","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-6.oe2203sp1"}]}]},{"source":"osv","ecosystem":"openEuler:24.03-LTS","package":"avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.10.2-6.oe2403"}]}]},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.apache.avro:avro-android","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0.rhlw-00002"}]}],"versions":["1.11.0"],"bundled":2},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.0.rhlw-00002"}]}],"versions":["1.10.0","1.10.1","1.10.2","1.11.0","1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2"],"bundled":2},{"source":"osv","ecosystem":"Red Hat Lightwell:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.9.2.rhlw-00002"}]}],"versions":["1.4.0","1.4.1","1.5.0","1.5.1","1.5.2","1.5.3","1.5.4","1.6.0","1.6.1","1.6.2","1.6.3","1.7.0","1.7.1","1.7.2","1.7.3","1.7.4","1.7.5","1.7.6","1.7.7","1.8.0","1.8.1","1.8.2","1.9.0","1.9.1","1.9.2"],"bundled":2},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.4.10-1.SP1_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.6-8.redhat_00003.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-3.redhat_00004.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-annotations-api_1.3_spec","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.1-4.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-cli","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-core","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap6.4-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.2-to-eap7.3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-eap7.3-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly10.1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly11.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly12.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly13.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly14.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly15.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly16.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly17.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly18.0-server","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly8.2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-server-migration-wildfly9.0","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.2-12.Final_redhat_00013.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.7.13-1.Final_redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-log4j-jboss-logmanager","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.2.2-2.Final_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk11","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-java-jdk8","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-javadocs","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.3.11-4.GA_redhat_00002.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-bindings","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-policy","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-common","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-dom","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-policy-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-wss4j-ws-security-stax","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.3.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-38.redhat_00015.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.3::el7","package":"eap7-xml-security","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.2.3-2.redhat_00001.1.el7eap"}]}],"bundled":14},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-rt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-services","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-apache-cxf-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.1.16-3.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.7.6-2.redhat_00003.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-mail","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-pkix","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-bouncycastle-prov","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.68.0-1.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-h2database","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.4.197-2.redhat_00005.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jackson-databind","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.8.11.6-1.SP1_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-marshalling","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-marshalling-river","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.0.15-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-jboss-xnio-base","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:3.5.10-1.Final_redhat_00001.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.8-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-wildfly-modules","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:7.1.8-2.GA_redhat_00002.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform_eus:7.1::el7","package":"eap7-xalan-j2","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:2.7.1-26.redhat_00015.1.ep7.el7"}]}],"bundled":12},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el7","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.4-1.redhat_00001.1.el7eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el8","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.4-1.redhat_00001.1.el8eap"}]}]},{"source":"osv","ecosystem":"Red Hat:jboss_enterprise_application_platform:7.4::el9","package":"eap7-avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.11.4-1.redhat_00001.1.el9eap"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"io.root.org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.11.1-root.io.1"},{"fixed":"1.9.2-root.io.1"},{"fixed":"1.9.2-root.io.2"},{"fixed":"1.7.7-root.io.1"},{"fixed":"1.7.7-root.io.2"},{"fixed":"1.11.1-root.io.2"},{"fixed":"1.9.2-root.io.3"},{"fixed":"1.11.3-root.io.1"},{"fixed":"1.11.0-root.io.1"}]}]},{"source":"osv","ecosystem":"Root:Maven","package":"org.apache.avro:avro","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.7-aikido.2"},{"fixed":"1.11.1-aikido.2"},{"fixed":"1.9.2-aikido.3"},{"fixed":"1.11.3-aikido.1"},{"fixed":"1.11.0-aikido.1"}]}]}],"products":[{"vendor":"apache","product":"avro"},{"vendor":"apache software foundation","product":"apache avro java sdk"},{"vendor":"netapp","product":"active_iq_unified_manager"},{"vendor":"netapp","product":"brocade_san_navigator"}],"references":[{"url":"https://lists.apache.org/thread/c2v7mhqnmq0jmbwxqq3r5jbj1xg43h5x","tags":["vendor-advisory","Mailing List","Vendor Advisory","advisory","web"]},{"url":"http://www.openwall.com/lists/oss-security/2024/10/03/1","tags":["Mailing List","Third Party Advisory","web"]},{"url":"https://security.netapp.com/advisory/ntap-20241011-0003/","tags":["Third Party Advisory","advisory","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-47561","tags":["advisory","web"]},{"url":"https://github.com/apache/avro/pull/2934","tags":["web"]},{"url":"https://github.com/apache/avro/pull/2980","tags":["web"]},{"url":"https://github.com/apache/avro/commit/8f89868d29272e3afea2ff8de8c85cb81a57d900","tags":["web"]},{"url":"https://github.com/apache/avro/commit/f6b3bd7e50e6e09fedddb98c61558c022ba31285","tags":["web"]},{"url":"https://issues.apache.org/jira/browse/AVRO-3985","tags":["web"]},{"url":"https://thehackernews.com/2024/10/critical-apache-avro-sdk-flaw-allows.html","tags":["web"]},{"url":"https://www.openwall.com/lists/oss-security/2024/10/03/1","tags":["web"]},{"url":"https://security.netapp.com/advisory/ntap-20241011-0003","tags":["web"]},{"url":"https://github.com/advisories/GHSA-r7pg-v2c8-mfg3","tags":["web","advisory"]},{"url":"https://repo.maven.apache.org/maven2","tags":["web"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/47xxx/CVE-2024-47561.json","tags":["advisory"]},{"url":"https://github.com/apache/avro","tags":["package"]},{"url":"https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2024-2227","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/39xxx/CVE-2023-39410.json","tags":["advisory"]},{"url":"https://lists.apache.org/thread/q142wj99cwdd0jo5lvdoxzoymlqyjdds","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-39410","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rhrv-645h-fjfh","tags":["advisory"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/33xxx/CVE-2025-33042.json","tags":["advisory"]},{"url":"https://lists.apache.org/thread/fy88wmgf1lj9479vrpt12cv8x73lroj1","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-33042","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-rp46-r563-jrc7","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10207","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.3/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2010378","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2031667","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041959","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2041967","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2044596","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2108554","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2136141","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2155682","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2182864","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2213639","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2241822","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2242521","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2270732","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2316116","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-23025","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10207.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-3859","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-3859","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-3859","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2021-4104","tags":["report"]},{"url":"https://access.redhat.com/security/vulnerabilities/RHSB-2021-009","tags":["article"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2021-4104","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2021-4104","tags":["advisory"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-990494126","tags":["article"]},{"url":"https://github.com/apache/logging-log4j2/pull/608#issuecomment-991723301","tags":["article"]},{"url":"https://lists.apache.org/thread/0x4zvtq92yggdgvwfgsftqrj4xx5w0nx","tags":["article"]},{"url":"https://www.openwall.com/lists/oss-security/2021/12/13/1","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23221","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23221","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23221","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-45hx-wfhj-473x","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23305","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23305","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23305","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/4","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-23307","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-23307","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-23307","tags":["advisory"]},{"url":"https://www.openwall.com/lists/oss-security/2022/01/18/5","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-34169","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-34169","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-34169","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-41853","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-41853","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-41853","tags":["advisory"]},{"url":"http://hsqldb.org/doc/2.0/guide/sqlroutines-chapt.html#src_jrt_access_control","tags":["article"]},{"url":"https://github.com/advisories/GHSA-77xx-rxvh-q682","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2022-46364","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2022-46364","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-46364","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2022-46364.txt?version=1\u0026modificationDate=1670944472739\u0026api=v2","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-3171","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-3171","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-3171","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-5685","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-5685","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-5685","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-26464","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-26464","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2023-26464","tags":["advisory"]},{"url":"https://www.ibm.com/support/pages/security-bulletin-vulnerability-log4j-1216jar-affect-ibm-operations-analytics-log-analysis-cve-2023-26464","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2023-39410","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2023-39410","tags":["advisory"]},{"url":"https://issues.apache.org/jira/browse/AVRO-3819","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-28752","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-28752","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-28752","tags":["advisory"]},{"url":"https://cxf.apache.org/security-advisories.data/CVE-2024-28752.txt","tags":["article"]},{"url":"https://github.com/advisories/GHSA-qmgx-j96g-4428","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2024-47561","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2024-47561","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:10208","tags":["advisory"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.1/html-single/installation_guide/index","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1796225","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1912881","tags":["report"]},{"url":"https://issues.redhat.com/browse/JBEAP-27708","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_10208.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-7238","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-7238","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-7238","tags":["advisory"]},{"url":"https://netty.io/news/2019/12/18/4-1-44-Final.html","tags":["article"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-28052","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-28052","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-28052","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2024:7811","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#critical","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4","tags":["article"]},{"url":"https://docs.redhat.com/en/documentation/red_hat_jboss_enterprise_application_platform/7.4/html-single/installation_guide/index","tags":["article"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2024/rhsa-2024_7811.json","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2024-47561","title":"Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.","status":"published","published":"2024-10-03T10:23:16.214Z","modified":"2024-10-21T08:51:22.972Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical","assessor":"cna"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"adp"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:33:57.302325Z"}],"euvd":[{"id":"EUVD-2024-3126","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.","status":"published","published":"2024-10-03T10:23:16Z","modified":"2024-10-21T08:51:22Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-03T00:27:32.691525Z"}],"ghsa":[{"id":"GHSA-r7pg-v2c8-mfg3","title":"Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.","status":"published","published":"2024-10-03T12:30:48Z","modified":"2025-07-10T23:19:29Z","cvss":[{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:38:49.837727Z"}],"nvd":[{"id":"CVE-2024-47561","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.","status":"published","published":"2024-10-03T11:15:13.51Z","modified":"2026-06-17T07:57:18.703Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical","assessor":"secondary"},{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high","assessor":"secondary"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T14:10:30.673028Z"}],"osv":[{"id":"CVE-2024-47561","title":"Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.","status":"published","published":"2024-10-03T10:23:16.214Z","modified":"2026-10-28T02:30:37.492793929Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T15:44:43.253252Z"},{"id":"GHSA-r7pg-v2c8-mfg3","title":"Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4 or 1.12.0, which fix this issue.","status":"published","published":"2024-10-03T12:30:48Z","modified":"2026-09-10T03:50:20.07959714Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"},{"version":"4.0","score":9.3,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"cwes":["CWE-502"],"updated_at":"2026-11-02T15:46:55.480549Z"},{"id":"JLSEC-2026-1374","title":"Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)","description":"Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.","status":"published","published":"2026-08-24T13:43:17.899Z","modified":"2026-08-24T14:14:19.672087049Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"},{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","level":"critical"}],"updated_at":"2026-11-02T15:47:18.159338Z"},{"id":"OESA-2024-2227","title":"avro security update","description":"Apache Avro is a data serialization system.\r\n\r\nSecurity Fix(es):\r\n\r\nSchema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code.\nUsers are recommended to upgrade to version 1.11.4  or 1.12.0, which fix this issue.(CVE-2024-47561)","status":"published","published":"2024-10-12T11:07:42Z","modified":"2026-08-18T01:17:34.37713661Z","cvss":[{"version":"3.1","score":7.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"high"}],"updated_at":"2026-11-02T15:52:41.595342Z"},{"id":"RHLW-2026-4051ab209e8865e6","title":"Lightwell Security Advisory: avro-android 1.11.0.rhlw-00002","description":"Red Hat Lightwell has released org.apache.avro:avro-android 1.11.0.rhlw-00002 with backported fixes for CVE-2023-39410 and CVE-2024-47561.\n\nCVE-2023-39410: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK\n\nCVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)\n\nThis patched artifact is a drop-in replacement for org.apache.avro:avro-android 1.11.0 from Maven Central.","status":"published","published":"2026-10-08T19:45:40Z","modified":"2026-10-27T04:13:04.772693794Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-41bd2185e6d22e15","title":"Lightwell Security Advisory: avro 1.11.0.rhlw-00002","description":"Red Hat Lightwell has released org.apache.avro:avro 1.11.0.rhlw-00002 with backported fixes for CVE-2023-39410 and CVE-2024-47561.\n\nCVE-2023-39410: Apache Avro Java SDK: Memory when deserializing untrusted data in Avro Java SDK\n\nCVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)\n\nThis patched artifact is a drop-in replacement for org.apache.avro:avro 1.11.0 from Maven Central.","status":"published","published":"2026-09-17T11:51:50Z","modified":"2026-10-27T04:13:00.162498457Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHLW-2026-6dd67008e326a981","title":"Lightwell Security Advisory: avro 1.9.2.rhlw-00002","description":"Red Hat Lightwell has released org.apache.avro:avro 1.9.2.rhlw-00002 with backported fixes for CVE-2024-47561 and CVE-2025-33042.\n\nCVE-2024-47561: Apache Avro Java SDK: Arbitrary Code Execution when reading Avro schema (Java SDK)\n\nCVE-2025-33042: Apache Avro Java SDK: Code injection on Java generated code\n\nThis patched artifact is a drop-in replacement for org.apache.avro:avro 1.9.2 from Maven Central.","status":"published","published":"2026-09-23T15:43:01Z","modified":"2026-10-27T04:00:10.724612476Z","cvss":[{"version":"4.0","score":9.2,"vector":"CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"critical"}],"updated_at":"2026-11-02T15:52:58.636919Z"},{"id":"RHSA-2024:10207","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.11 Security update","status":"published","published":"2024-11-26T07:31:41Z","modified":"2026-10-20T10:02:32Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:10208","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.8 on RHEL 7 security update","status":"published","published":"2024-11-26T07:31:51Z","modified":"2026-10-20T10:02:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:12.787505Z"},{"id":"RHSA-2024:7811","title":"Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.4 Security update","status":"published","published":"2024-10-08T18:19:25Z","modified":"2026-10-20T10:02:55Z","cvss":[{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:53:14.610978Z"},{"id":"ROOT-APP-MAVEN-CVE-2024-47561","title":"CVE-2024-47561 in io.root.org.apache.avro:avro - Patched by Root","description":"Root has patched CVE-2024-47561 in the io.root.org.apache.avro:avro package for Root:Maven. Multiple fixed versions available.","status":"published","published":"2026-06-26T07:55:59Z","modified":"2026-06-26T13:00:04.285159321Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:27.066589Z"},{"id":"CLSA-2025-1765325273","title":"TuxCare security update for org.apache.avro (2 CVEs)","description":"TuxCare rebuilt 23 org.apache.avro packages to address 2 CVEs. Fixed in 1.10.2-tuxcare.2.","status":"published","published":"2026-08-04T14:52:06Z","modified":"2026-10-15T09:46:15.914212409Z","updated_at":"2026-11-02T15:43:42.847264Z"},{"id":"CLSA-2026-1774225177","title":"TuxCare security update for org.apache.avro:avro (1 CVE)","description":"TuxCare rebuilt org.apache.avro:avro to address 1 CVE. Fixed in 1.11.3-tuxcare.1.","status":"published","published":"2026-08-04T14:52:14Z","modified":"2026-11-02T19:45:03.856869415Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1778633128","title":"TuxCare security update for org.apache.avro (3 CVEs)","description":"TuxCare rebuilt 16 org.apache.avro packages to address 3 CVEs. Fixed in 1.7.6-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-10-15T09:46:30.858371328Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778633130","title":"TuxCare security update for org.apache.avro (3 CVEs)","description":"TuxCare rebuilt 16 org.apache.avro packages to address 3 CVEs. Fixed in 1.7.7-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-10-15T09:46:30.8024139Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1778719546","title":"TuxCare security update for org.apache.avro:avro (2 CVEs)","description":"TuxCare rebuilt org.apache.avro:avro to address 2 CVEs. Fixed in 1.8.2-tuxcare.1.","status":"published","published":"2026-08-04T14:52:31Z","modified":"2026-11-02T19:45:28.951174895Z","updated_at":"2026-11-02T20:30:40.499236Z"},{"id":"CLSA-2026-1780966325","title":"TuxCare security update for org.apache.avro:avro (1 CVE)","description":"TuxCare rebuilt org.apache.avro:avro to address 1 CVE. Fixed in 1.11.0-tuxcare.2.","status":"published","published":"2026-08-04T14:52:36Z","modified":"2026-11-02T19:45:38.154312517Z","updated_at":"2026-11-02T20:30:13.950198Z"},{"id":"CLSA-2026-1794253414","title":"TuxCare security update for org.apache.avro (3 CVEs)","description":"TuxCare rebuilt 2 org.apache.avro packages to address 3 CVEs. Fixed in 1.11.1-tuxcare.1.","status":"published","published":"2026-11-09T20:43:34Z","modified":"2026-11-10T01:15:03.453043748Z","updated_at":"2026-11-10T01:43:20.132342Z"}]}}