iskorotkov has 4 CVEs on record. The busiest recent month was May 2026 with 3. The median CVSS is 7.5 (high). Most affected products: avro (2), github.com/iskorotkov/avro/v2 (2).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 7.5
- Publish → KEV
- —
- Last 90 days
- 0 prev 4
Worst active — by depth score
CVE-2026-46385High· 7.5iskorotkov/avro is a fast Go Avro codec53CVE-2026-46384High· 7.5iskorotkov/avro is a fast Go Avro codec41GHSA-mx64-mj3q-7prjHigh· 7.5iskorotkov/avro: Denial-of-Service Vulnerability in Decoder41GO-2026-5048NoneDenial of service via unbounded map allocations in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v23
iskorotkov vulnerabilities
CVEs affecting iskorotkov, newest first. Open any entry for full detail, references, and exploit status.
4 CVEsRSS
GO-2026-5048NoneDenial of service via unbounded map allocations in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
Denial of service via unbounded map allocations in github.com/iskorotkov/avro/v2 and github.com/hamba/avro/v2
CVE-2026-46385High· 7.5PoCiskorotkov/avro is a fast Go Avro codec
iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, the Avro array and map decoders looped over an attacker-controlled block-count value without checking the underlying reader's error state inside the loop body. Reader.ReadBlockHea…
CVE-2026-46384High· 7.5iskorotkov/avro is a fast Go Avro codec
iskorotkov/avro is a fast Go Avro codec. Prior to 2.33.0, several Avro decoder paths read attacker-controlled 64-bit values from the wire format and either narrowed them to platform-sized int before bounds-checking, or summed them with o…
GHSA-mx64-mj3q-7prjHigh· 7.5iskorotkov/avro: Denial-of-Service Vulnerability in Decoder
iskorotkov/avro: Denial-of-Service Vulnerability in Decoder