`org.apache.avro:avro`

Ecosystem:
maven

Package URL:
pkg:maven/org.apache.avro:avro

Total PRs:
214 Dependabot PRs

Latest PR:
about 2 months ago

Unique Repositories:
119 repositories

Unique Repos (30 days):
0 repositories

Security Advisories

Apache Avro Java SDK vulnerable to Improper Input Validation

GHSA-rhrv-645h-fjfh CVE-2023-39410 HIGH published over 2 years ago • updated 6 days ago

When deserializing untrusted or corrupted data, it is possible for a reader to consume memory beyond the allowed constraints and thus lead to out o...

Apache Avro Java SDK: Arbitrary Code Execution when reading Avro Data (Java SDK)

GHSA-r7pg-v2c8-mfg3 CVE-2024-47561 CRITICAL published over 1 year ago • updated 8 days ago

Schema parsing in the Java SDK of Apache Avro 1.11.3 and previous versions allows bad actors to execute arbitrary code. Users are recommended to up...

Recent PRs

RSS Feed

Bump the maven group across 11 directories with 16 updates

GizzZmo/dubbo #4

1.11.1 → 1.11.4 Patch PR

Closed about 2 months ago 1 comment

Bump the maven group across 8 directories with 9 updates

xxubai/amoro #12

1.10.1 → 1.11.4 Minor PR

Closed 2 months ago 1 comment

build(deps): bump the maven group across 14 directories with 16 updates

0ai-Cyberviser/oss-fuzz #7

Fuzzing-SNAPSHOT → 1.11.4

Open 3 months ago 2 comments

build(deps): bump the maven group across 8 directories with 12 updates

0ai-Cyberviser/oss-fuzz #6

Fuzzing-SNAPSHOT → 1.11.4

Closed 3 months ago 1 comment

build(deps): bump the maven group across 15 directories with 17 updates

stweil/oss-fuzz #5

Fuzzing-SNAPSHOT → 1.11.4

Closed 3 months ago 1 comment

chore(deps): bump org.apache.avro:avro from 1.11.4 to 1.11.5 in /streampipes-extensions/streampipes-extensions-all-jvm

apache/streampipes #4179

1.11.4 → 1.11.5 Patch PR

Open 4 months ago 1 comment

Bump org.apache.avro:avro from 1.11.4 to 1.11.5 in /sdk/core/azure-core-serializer-avro-apache

FOCONIS/azure-sdk-for-java #12

1.11.4 → 1.11.5 Patch PR

Closed 4 months ago 3 comments

chore(deps): Bump org.apache.avro:avro from 1.11.4 to 1.11.5 in /java/serving

feast-dev/feast #5968

1.11.4 → 1.11.5 Patch PR

Closed 4 months ago 1 comment

Bump org.apache.avro:avro from 1.9.2 to 1.11.5

SNiTEBoBy/druid #637

1.9.2 → 1.11.5 Minor PR

Open 4 months ago 1 comment

Bump org.apache.avro:avro from 1.11.4 to 1.11.5 in /paimon-flink/paimon-flink-cdc

apache/paimon #7290

1.11.4 → 1.11.5 Patch PR

Closed 4 months ago 1 comment

chore(deps): bump org.apache.avro:avro from 1.11.4 to 1.11.5 in /streampipes-extensions-management

apache/streampipes #4174

1.11.4 → 1.11.5 Patch PR

Open 4 months ago 2 comments

Build(deps): bump org.apache.avro:avro from 1.11.4 to 1.11.5 in /examples/pubsub-publish-avro-example

GoogleCloudPlatform/professional-services #1783

1.11.4 → 1.11.5 Patch PR

Open 4 months ago 1 comment

Bump org.apache.avro:avro from 1.8.2 to 1.11.5

ImagineLearning/flink #20

1.8.2 → 1.11.5 Minor PR

Open 4 months ago 3 comments

Bump org.apache.avro:avro from 1.7.7 to 1.11.5 in /minifi

NickJLange/nifi #17

1.7.7 → 1.11.5 Minor PR

Closed 4 months ago 2 comments

Bump org.apache.avro:avro from 1.7.7 to 1.11.5 in /flink_jobs_v2/ams_ingest_metric

ARGOeu/argo-streaming #461

1.7.7 → 1.11.5 Minor PR

Closed 4 months ago 1 comment

Bump org.apache.avro:avro from 1.11.3 to 1.11.5 in /flink_jobs_v3/profiles-manager

ARGOeu/argo-streaming #460

1.11.3 → 1.11.5 Patch PR

Closed 4 months ago 1 comment

build(deps): Bump org.apache.avro:avro from 1.12.0 to 1.12.1

prestodb/presto #27141

1.12.0 → 1.12.1 Patch PR

Open 4 months ago 1 comment

Bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /shims/cdpdc71/driver

pentaho/pentaho-hadoop-shims #1781

1.12.0 → 1.12.1 Patch PR

Open 4 months ago 3 comments

Bump org.apache.avro:avro from 1.11.3 to 1.11.5 in /seatunnel-connectors-v2/connector-cdc/connector-cdc-mongodb

apache/seatunnel #10493

1.11.3 → 1.11.5 Patch PR

Closed 4 months ago 2 comments

Bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /shims/emr770/driver

pentaho/pentaho-hadoop-shims #1780

1.12.0 → 1.12.1 Patch PR

Open 4 months ago 3 comments

Bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /lib

apache/hop #6581

1.12.0 → 1.12.1 Patch PR

Closed 4 months ago 1 comment

Bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /shims/apache/driver

pentaho/pentaho-hadoop-shims #1779

1.12.0 → 1.12.1 Patch PR

Open 4 months ago 3 comments

Bump org.apache.avro:avro from 1.12.0 to 1.12.1

wangyum/hive #289

1.12.0 → 1.12.1 Patch PR

Open 4 months ago 2 comments

chore: bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /examples/powertools-examples-kafka/tools

aws-powertools/powertools-lambda-java #2386

1.12.0 → 1.12.1 Patch PR

Open 4 months ago 1 comment

build(deps): bump org.apache.avro:avro from 1.11.1 to 1.11.4

fireflyframework/fireflyframework-core #1

1.11.1 → 1.11.4 Patch PR

Closed 4 months ago 1 comment

Build(deps): bump the maven group across 1 directory with 11 updates

Sanketika-Obsrv/secor #9

1.10.0 → 1.11.4 Minor PR

Open 5 months ago 1 comment

build(deps): bump the minor-and-patch group across 1 directory with 14 updates

SheheryarAamir/gradle-monorepo-spring-boot-4 #27

1.11.3 → 1.12.1 Minor PR

Closed 5 months ago 1 comment

Bump the others group across 1 directory with 18 updates

kafbat/kafka-ui #1627

1.11.4 → 1.12.1 Minor PR

Closed 5 months ago 1 comment

Bump the others group across 1 directory with 19 updates

kafbat/kafka-ui #1613

1.11.4 → 1.12.1 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump the minor-patch group across 1 directory with 12 updates

jprofessionals/slack-cv-bot #30

1.12.0 → 1.12.1 Patch PR

Closed 6 months ago 1 comment

[10.0.x] Bump the dev-dependencies group across 1 directory with 82 updates

cstamas/jetty.project #262

1.11.2 → 1.12.1 Minor PR

Open 6 months ago 2 comments

chore(deps): bump org.apache.avro:avro from 1.11.4 to 1.12.1 in /lib/java

TruvetaPublic/OpenToken #188

1.11.4 → 1.12.1 Minor PR

Open 6 months ago 18 comments

Bump the others group across 1 directory with 20 updates

kafbat/kafka-ui #1602

1.11.4 → 1.12.1 Minor PR

Closed 6 months ago 1 comment

Bump the others group across 1 directory with 19 updates

kafbat/kafka-ui #1597

1.11.4 → 1.12.1 Minor PR

Closed 6 months ago 1 comment

chore(deps): bump the dependencies group across 1 directory with 39 updates

navikt/syfosmregister #526

1.12.0 → 1.12.1 Patch PR

Closed 6 months ago 1 comment

chore(deps)(deps): Bump org.apache.avro:avro from 1.11.3 to 1.12.1

emilholmegaard/doc-architect #91

1.11.3 → 1.12.1 Minor PR

Open 6 months ago 1 comment

Bump the dependency-updates group across 1 directory with 42 updates

snowlift/trino-storage #420

1.12.0 → 1.12.1 Patch PR

Closed 6 months ago 1 comment

Bump the backend group across 1 directory with 5 updates

navikt/tilleggsstonader-kontrakter #152

1.12.0 → 1.12.1 Patch PR

Closed 6 months ago 1 comment

Bump the others group across 1 directory with 21 updates

yeikel/kafka-ui #380

1.11.4 → 1.12.1 Minor PR

Closed 6 months ago 1 comment

Bump the backend group across 1 directory with 26 updates

navikt/tilleggsstonader-sak #966

1.12.0 → 1.12.1 Patch PR

Closed 6 months ago 1 comment

Bump the others group with 20 updates

yeikel/kafka-ui #377

1.11.4 → 1.12.1 Minor PR

Closed 6 months ago 1 comment

Bump the others group with 17 updates

kafbat/kafka-ui #1565

1.11.4 → 1.12.1 Minor PR

Closed 6 months ago 1 comment

Bump org.apache.avro:avro from 1.11.3 to 1.11.4

gbif/registry #742

1.11.3 → 1.11.4 Patch PR

Closed 6 months ago 1 comment

Bump the backend group across 1 directory with 25 updates

navikt/tilleggsstonader-sak #953

1.12.0 → 1.12.1 Patch PR

Closed 7 months ago 1 comment

Bump the other-dependencies group across 1 directory with 29 updates

kafbat/kafka-ui #1545

1.11.4 → 1.12.1 Minor PR

Closed 7 months ago 1 comment

Bump the others group across 1 directory with 8 updates

yeikel/kafka-ui #346

1.11.4 → 1.12.1 Minor PR

Open 7 months ago 1 comment

Bump the other-dependencies group across 1 directory with 28 updates

yeikel/kafka-ui #300

1.11.4 → 1.12.1 Minor PR

Open 7 months ago 2 comments

Bump the other-dependencies group with 32 updates

yeikel/kafka-ui #299

1.11.4 → 1.12.1 Minor PR

Open 7 months ago 2 comments

chore(deps): bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /lib/java/opentoken

TruvetaPublic/OpenToken #152

1.12.0 → 1.12.1 Patch PR

Open 7 months ago 6 comments

chore(deps): bump org.apache.avro:avro from 1.12.0 to 1.12.1 in /lib/java/opentoken

mattwise-42/OpenToken #68

1.12.0 → 1.12.1 Patch PR

Open 7 months ago 2 comments

Package Details

Name:	`org.apache.avro:avro`
Ecosystem:	maven
PURL Type:	maven
Package URL:	`pkg:maven/org.apache.avro:avro`
JSON API:	View JSON

Security Advisories

2

Active advisories

CRITICAL 1

HIGH 1

View All maven Advisories

Package Information

Description:

Avro core components

Repository:	https://github.com/apache/avro
Homepage:	https://avro.apache.org
Latest Release:	`1.12.0` almost 2 years ago
Dependent Repos:	15,858
Dependent Packages:	1,964
Ranking:	Top 0.0555% by dependent repos Top 0.0363% by dependent pkgs

PR Status

Open 91 (42.5%)

Merged 19 (8.9%)

Closed 90 (42.1%)

PR Types

Minor 98 (45.8%)

Patch 96 (44.9%)