Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 15:38:38 +0000 BREW-kaskade-CVE-2025-33042 https://vulnerability.circl.lu/vuln/brew-kaskade-cve-2025-33042 <p><strong>Affected:</strong> Homebrew: kaskade</p> <p>Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.</p> <p>This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.</p> <p>Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.</p> <p><strong>Affected:</strong> Homebrew: kaskade</p> <p>Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.</p> <p>This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.</p> <p>Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.</p> https://vulnerability.circl.lu/vuln/brew-kaskade-cve-2025-33042 CVE-2025-33042 — Apache Avro Java SDK: Code injection on Java generated code https://vulnerability.circl.lu/vuln/cve-2025-33042 <p><strong>Affected:</strong> Apache Software Foundation Apache Avro Java SDK</p> <p>Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.</p> <p>This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.</p> <p>Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.</p> <p><strong>Affected:</strong> Apache Software Foundation Apache Avro Java SDK</p> <p>Improper Control of Generation of Code (&#39;Code Injection&#39;) vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.</p> <p>This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0.</p> <p>Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.</p> https://vulnerability.circl.lu/vuln/cve-2025-33042