GHSA-mc57-h6j3-3hmvPublished

iskorotkov/avro: Integer Overflow in Avro Decoder

cve-program · CVE-2026-46384

Published

avro

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "iskorotkov",
                    "product": "avro",
                    "versions": [
                        {
                            "version": "< 2.33.0",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2026-33443

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: May 29, 2026, 7:58:21 PM

dateUpdated: Sep 9, 2026, 12:04:43 PM

9 related source bulletins · separate from aliases

RHSA-2026:48151: Red Hat Security Advisory: Red Hat build of Cryostat security update

CVE-2026-6734 · CVE-2026-6860 · CVE-2026-9697 · CVE-2026-12143 · CVE-2026-12151 · CVE-2026-13149 · CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33811 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-39830 · CVE-2026-39835 · CVE-2026-42504 · CVE-2026-44249 · CVE-2026-44290 · CVE-2026-44291 · CVE-2026-44292 · CVE-2026-44893 · CVE-2026-45416 · CVE-2026-45674 · CVE-2026-45736 · CVE-2026-45740 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-46595 · CVE-2026-46599 · CVE-2026-46625 · CVE-2026-47691 · CVE-2026-48043 · CVE-2026-48059 · CVE-2026-48779 · CVE-2026-50010 · CVE-2026-50559 · CVE-2026-54512 · CVE-2026-54513

RHSA-2026:53530: Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update

CVE-2026-27145 · CVE-2026-33376 · CVE-2026-33377 · CVE-2026-33811 · CVE-2026-39821 · CVE-2026-42151 · CVE-2026-42154 · CVE-2026-42306 · CVE-2026-43870 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-53488 · CVE-2026-53492 · CVE-2026-55677 · CVE-2026-55969 · CVE-2026-66801

RHSA-2026:30651: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.13.9 security update

CVE-2026-35206 · CVE-2026-39821 · CVE-2026-42154 · CVE-2026-43869 · CVE-2026-44486 · CVE-2026-44487 · CVE-2026-44488 · CVE-2026-44492 · CVE-2026-44494 · CVE-2026-44495 · CVE-2026-44496 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-46595

RHSA-2026:57191: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.16.3 security update

CVE-2026-13676 · CVE-2026-14362 · CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33377 · CVE-2026-33811 · CVE-2026-33814 · CVE-2026-39828 · CVE-2026-39829 · CVE-2026-42151 · CVE-2026-42502 · CVE-2026-42504 · CVE-2026-44486 · CVE-2026-44487 · CVE-2026-44488 · CVE-2026-44492 · CVE-2026-44494 · CVE-2026-44495 · CVE-2026-44496 · CVE-2026-44740 · CVE-2026-44990 · CVE-2026-45623 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-53488 · CVE-2026-59869 · CVE-2026-66799 · CVE-2026-66804 · CVE-2026-69153 · CVE-2026-73086

RHSA-2026:44622: Red Hat Security Advisory: Multicluster Global Hub 1.6.4 security update

CVE-2026-25681 · CVE-2026-27136 · CVE-2026-27145 · CVE-2026-33376 · CVE-2026-33377 · CVE-2026-33811 · CVE-2026-39821 · CVE-2026-41567 · CVE-2026-42151 · CVE-2026-42154 · CVE-2026-43870 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-53488 · CVE-2026-53492 · CVE-2026-55677

RHSA-2026:41030: Red Hat Security Advisory: Multicluster Global Hub 1.4.7 security update

CVE-2026-25681 · CVE-2026-27136 · CVE-2026-27145 · CVE-2026-33811 · CVE-2026-39821 · CVE-2026-41567 · CVE-2026-42151 · CVE-2026-42154 · CVE-2026-43870 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-53488 · CVE-2026-53492

RHSA-2026:41064: Red Hat Security Advisory: Red Hat Advanced Cluster Management for Kubernetes v2.11.10 security update

CVE-2025-9288 · CVE-2025-13465 · CVE-2026-21721 · CVE-2026-22029 · CVE-2026-25639 · CVE-2026-42508 · CVE-2026-44486 · CVE-2026-44487 · CVE-2026-44488 · CVE-2026-44492 · CVE-2026-44494 · CVE-2026-44495 · CVE-2026-44496 · CVE-2026-44990 · CVE-2026-46384 · CVE-2026-46385

RHSA-2026:42852: Red Hat Security Advisory: Multicluster Global Hub 1.5.6 security update

CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33376 · CVE-2026-33377 · CVE-2026-33811 · CVE-2026-39821 · CVE-2026-41567 · CVE-2026-42151 · CVE-2026-42154 · CVE-2026-43870 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-53488 · CVE-2026-53492

RHSA-2026:47149: Red Hat Security Advisory: Multicluster Global Hub 1.7.2 security update

CVE-2026-27145 · CVE-2026-33376 · CVE-2026-33377 · CVE-2026-33811 · CVE-2026-39821 · CVE-2026-42151 · CVE-2026-42154 · CVE-2026-43870 · CVE-2026-46384 · CVE-2026-46385 · CVE-2026-53488 · CVE-2026-53492 · CVE-2026-55677

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2026-46384

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Deferred

Weakness classifications: CWE-190

Original publisher date fields

published: 2026-05-29T20:16:27.847

lastModified: 2026-09-09T13:20:17.007

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-mc57-h6j3-3hmv

Published

github.com/iskorotkov/avro/v2

SEMVER · introduced 0 → fixed 2.33.0

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GO-2026-5047

Published

github.com/iskorotkov/avro/v2

SEMVER · introduced 0 → fixed 2.33.0

github.com/hamba/avro/v2

SEMVER · introduced 0

Original source record · Cite this exact observation · Complete original publisher JSON