VulertSecurity VulertSecurity

Vulnerability Database · Go · Package report

github.com/hamba/avro/v2: vulnerability history, versions and safety

github.com/hamba/avro/v2 is a package in the Go ecosystem. Vulert records 2 vulnerabilities for it across 120 releases, first recorded in Jul 2023. Each vulnerability names the versions it affects, the fixed version to move to, and a workaround where no fix has been published.

i
2 vulnerabilities recorded U2
i
0 with no fix published

Every vulnerability has a patched version to move to.

i
0 in the last 12 months

Nothing new recorded in the last year.

See the disclosure history →
i
0 malicious-package vulnerabilities

No published version shipped hostile code.

See all github.com/hamba/avro/v2 vulnerabilities

Vulert verdict on github.com/hamba/avro/v2 v2.31.0 i

Updated on 23 Oct 2026

Action needed: v2.31.0 has 2 known vulnerabilities, but every one of them has a fix. Upgrade to the version listed below and you are clear.

Package health score 76/100
  • Security Minor issues
  • Maintenance Sustainable
  • Popularity Widely used
  • Community Quiet

What to do: Upgrade to the version that resolves each vulnerability below. Fix it, then keep watch: this version is affected today, and the next one may be too — Vulert alerts you when a new vulnerability lands. Monitor it with Vulert →

  • Current release v2.31.0 — affected i
  • Vulnerabilities on record 2 over 1 year · 0 in the last year i
  • Latest disclosure 25 Jul 2023 i
  • Highest CVSS n/a i
  • With no published fix 0 i
  • Stars 508 i
  • OpenSSF scorecard 2/10 i
  • Last release 9 months ago i
  • Licence MIT i

Version list, release dates, licence and dependants published by the Go module proxy, refreshed 23 Oct 2026. Licence information is not legal advice.

Concerned about your application's security?

Vulert continues monitoring your dependencies and alerts you when new vulnerabilities are disclosed. No installation and no source-code access required.

01 Versions

Which versions are affected

Every version Vulert tracks for github.com/hamba/avro/v2, newest first, with the vulnerabilities recorded against each one. A version showing none has no vulnerability in the Vulert database — open it for the full picture on that release.

i
Version Released Vulert vulnerabilities Licence Fix published Details
v2.0.0-20260107155452-afbafcb0b218 07 Jan 2026 U2 MIT Yes Details →
v2.31.1-0.20260107155452-afbafcb0b218 07 Jan 2026 U2 MIT Yes Details →
v2.30.1-0.20251230040915-b022ed5d20b0 30 Dec 2025 U2 MIT Yes Details →
v2.31.0 30 Dec 2025 U2 MIT Yes Details →
v2.30.1-0.20251216181646-2bffcc18ed6d 16 Dec 2025 U2 MIT Yes Details →
v2.30.1-0.20251201191811-9af4aa479585 01 Dec 2025 U2 MIT Yes Details →
v2.30.1-0.20251126053254-dd9ac909e09d 26 Nov 2025 U2 MIT Yes Details →
v2.30.1-0.20251117174900-f6960fb6da50 17 Nov 2025 U2 MIT Yes Details →
v2.30.1-0.20251110172415-cdd6527b5ce6 10 Nov 2025 U2 MIT Yes Details →
v2.30.1-0.20251020180129-505d33f63a34 20 Oct 2025 U2 MIT Yes Details →
v2.30.1-0.20251014043018-788716cba39c 14 Oct 2025 U2 MIT Yes Details →
v2.30.1-0.20250918053247-7f12625a3fc7 18 Sep 2025 U2 MIT Yes Details →
v2.30.0 08 Sep 2025 U2 MIT Yes Details →
v2.29.1-0.20250902164053-9716ee8b4a24 02 Sep 2025 U2 MIT Yes Details →
v2.29.1-0.20250827043836-fa1080ca2993 27 Aug 2025 U2 MIT Yes Details →
v2.29.1-0.20250812022754-3a2190978f49 12 Aug 2025 U2 MIT Yes Details →
v2.29.1-0.20250729181539-4e405ff5ea8f 29 Jul 2025 U2 MIT Yes Details →
v2.29.1-0.20250722183056-07bcb49a2944 22 Jul 2025 U2 MIT Yes Details →
v2.29.1-0.20250721194530-7d552fd14e16 21 Jul 2025 U2 MIT Yes Details →
v2.29.1-0.20250720044155-969818f92ad0 20 Jul 2025 U2 MIT Yes Details →
v2.29.1-0.20250719123658-1531309b3d49 19 Jul 2025 U2 MIT Yes Details →
v2.29.1-0.20250630191219-5ec06b38c0b4 30 Jun 2025 U2 MIT Yes Details →
v2.29.1-0.20250616193452-2ed89e626dd5 16 Jun 2025 U2 MIT Yes Details →
v2.29.1-0.20250612151822-49ca6d5b5480 12 Jun 2025 U2 MIT Yes Details →
v2.29.0 10 Jun 2025 U2 MIT Yes Details →
v2.28.1-0.20250609174439-e7b240fb3299 09 Jun 2025 U2 MIT Yes Details →
v2.28.1-0.20250605194302-142e304d0623 05 Jun 2025 U2 MIT Yes Details →
v2.28.1-0.20250526104223-0b62b474fdfb 26 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250522054025-5cbf658dbef3 22 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250512200258-fd0c79e6dab7 12 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250509155644-13d0f227e1c3 09 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250506052015-31db81b3a9ca 06 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250505182353-aa368072c628 05 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250504082743-c25446e7dcce 04 May 2025 U2 MIT Yes Details →
v2.28.1-0.20250422155251-5c80dfbd1161 22 Apr 2025 U2 MIT Yes Details →
v2.28.1-0.20250417052852-98fc9f50cf33 17 Apr 2025 U2 MIT Yes Details →
v2.28.1-0.20250414175226-bf62ad256e0b 14 Apr 2025 U2 MIT Yes Details →
v2.28.1-0.20250407103614-29b696911d8c 07 Apr 2025 U2 MIT Yes Details →
v2.28.1-0.20250405091450-ec3a954665fa 05 Apr 2025 U2 MIT Yes Details →
v2.28.1-0.20250325044833-f6ebd9f2c54c 25 Mar 2025 U2 MIT Yes Details →
v2.28.1-0.20250310183313-52e732b32b54 10 Mar 2025 U2 MIT Yes Details →
v2.28.1-0.20250303194854-58261f50a896 03 Mar 2025 U2 MIT Yes Details →
v2.28.0 12 Feb 2025 U2 MIT Yes Details →
v2.27.1-0.20250206060806-d39c1ecbf113 06 Feb 2025 U2 MIT Yes Details →
v2.27.1-0.20250206052646-29f45e2973ea 06 Feb 2025 U2 MIT Yes Details →
v2.27.1-0.20250205162059-1154cdaee628 05 Feb 2025 U2 MIT Yes Details →
v2.27.1-0.20250130170645-e9a408d8a431 30 Jan 2025 U2 MIT Yes Details →
v2.27.1-0.20250127180214-7846b97396c9 27 Jan 2025 U2 MIT Yes Details →
v2.27.1-0.20250124045243-4ba9c7397e29 24 Jan 2025 U2 MIT Yes Details →
v2.27.1-0.20250113180007-68046a4308cb 13 Jan 2025 U2 MIT Yes Details →
v2.27.1-0.20250109081428-0ebcdff2ba19 09 Jan 2025 U2 MIT Yes Details →
v2.27.1-0.20241213150542-cb79c9fd34b3 13 Dec 2024 U2 MIT Yes Details →
v2.27.1-0.20241209183156-45d131be1264 09 Dec 2024 U2 MIT Yes Details →
v2.27.1-0.20241111175547-559978e0cd39 11 Nov 2024 U2 MIT Yes Details →
v2.27.1-0.20241028183443-c02c8795eb17 28 Oct 2024 U2 MIT Yes Details →
v2.27.1-0.20241021174323-20ac18bf16cb 21 Oct 2024 U2 MIT Yes Details →
v2.26.1-0.20241014184010-163e9ef922f3 14 Oct 2024 U2 MIT Yes Details →
v2.27.0 14 Oct 2024 U2 MIT Yes Details →
v2.26.1-0.20241011190203-631f6dd7d693 11 Oct 2024 U2 MIT Yes Details →
v2.26.1-0.20241007183347-99d2dbcf7a0d 07 Oct 2024 U2 MIT Yes Details →
v2.26.1-0.20240927165110-b4fe207b7016 27 Sep 2024 U2 MIT Yes Details →
v2.26.1-0.20240925155157-45e707125c38 25 Sep 2024 U2 MIT Yes Details →
v2.26.1-0.20240923122820-0e4fa96403ec 23 Sep 2024 U2 MIT Yes Details →
v2.25.3-0.20240916175403-571d8812102f 16 Sep 2024 U2 MIT Yes Details →
v2.26.0 16 Sep 2024 U2 MIT Yes Details →
v2.25.3-0.20240915054458-a6c674d3bc6b 15 Sep 2024 U2 MIT Yes Details →
v2.25.3-0.20240909172814-6edc7d3406c7 09 Sep 2024 U2 MIT Yes Details →
v2.25.2 07 Sep 2024 U2 MIT Yes Details →
v2.25.2-0.20240907115822-883fb8f86493 07 Sep 2024 U2 MIT Yes Details →
v2.25.1 03 Sep 2024 U2 MIT Yes Details →
v2.25.1-0.20240903045114-91b9f6f451a0 03 Sep 2024 U2 MIT Yes Details →
v2.25.0 22 Aug 2024 U2 MIT Yes Details →
v2.24.2-0.20240814043036-fdb7050201e1 14 Aug 2024 U2 MIT Yes Details →
v2.24.1 07 Aug 2024 U2 MIT Yes Details →
v2.24.1-0.20240807123742-9e78adb70d09 07 Aug 2024 U2 MIT Yes Details →
v2.24.1-0.20240806190614-b616a1aa82a2 06 Aug 2024 U2 MIT Yes Details →
v2.23.1-0.20240731190235-4aff30fedb98 31 Jul 2024 U2 MIT Yes Details →
v2.24.0 31 Jul 2024 U2 MIT Yes Details →
v2.23.1-0.20240731182923-cbc1589faead 31 Jul 2024 U2 MIT Yes Details →
v2.23.1-0.20240731181311-3fc81b66c693 31 Jul 2024 U2 MIT Yes Details →
v2.23.1-0.20240729184924-dfd5956e73a9 29 Jul 2024 U2 MIT Yes Details →
v2.23.1-0.20240728172355-f8a04925f286 28 Jul 2024 U2 MIT Yes Details →
v2.22.2-0.20240717082023-8ea283396ffa 17 Jul 2024 U2 MIT Yes Details →
v2.23.0 17 Jul 2024 U2 MIT Yes Details →
v2.22.2-0.20240715064843-bee5c033b487 15 Jul 2024 U2 MIT Yes Details →
v2.22.2-0.20240625062549-66aad10411d9 25 Jun 2024 U2 MIT Yes Details →
v2.22.2-0.20240621050549-e2e849d3e949 21 Jun 2024 U2 MIT Yes Details →
v2.22.2-0.20240618044119-a76983dc59af 18 Jun 2024 U2 MIT Yes Details →
v2.22.1 26 May 2024 U2 MIT Yes Details →
v2.22.1-0.20240526122702-109ccdab2a70 26 May 2024 U2 MIT Yes Details →
v2.22.1-0.20240518180522-aff3955acf7d 18 May 2024 U2 MIT Yes Details →
v2.22.0 13 May 2024 U2 MIT Yes Details →
v2.21.2-0.20240509184337-ee51df91b939 09 May 2024 U2 MIT Yes Details →
v2.21.2-0.20240506182643-0e4c8f965372 06 May 2024 U2 MIT Yes Details →
v2.21.1 30 Apr 2024 U2 MIT Yes Details →
v2.21.1-0.20240430165408-5dde47bbb655 30 Apr 2024 U2 MIT Yes Details →
v2.21.1-0.20240428102952-e42dea1ace40 28 Apr 2024 U2 MIT Yes Details →
v2.20.2-0.20240423192812-2461d450d6b0 23 Apr 2024 U2 MIT Yes Details →
v2.21.0 23 Apr 2024 U2 MIT Yes Details →
v2.20.2-0.20240423054634-84f9b10d4a70 23 Apr 2024 U2 MIT Yes Details →
v2.20.2-0.20240422170329-141e857efe21 22 Apr 2024 U2 — Yes Details →
v2.20.2-0.20240421164634-f138d7f53182 21 Apr 2024 U2 — Yes Details →
v2.20.2-0.20240418180211-7a2eb5fdc5a4 18 Apr 2024 U2 — Yes Details →
v2.20.2-0.20240405042946-4894c0b8ce08 05 Apr 2024 U2 — Yes Details →
v2.20.2-0.20240320161352-fd90800ccea6 20 Mar 2024 U2 — Yes Details →
v2.20.1 08 Mar 2024 U2 — Yes Details →
v2.20.1-0.20240308195918-1cb8acd0ae81 08 Mar 2024 U2 — Yes Details →
v2.20.1-0.20240226180715-979cff33f173 26 Feb 2024 U2 — Yes Details →
v2.20.1-0.20240212175206-35405ff53669 12 Feb 2024 U2 — Yes Details →
v2.19.1-0.20240207170445-0673db67a378 07 Feb 2024 U2 — Yes Details →
v2.20.0 07 Feb 2024 U2 — Yes Details →
v2.19.1-0.20240207051628-c51e9548ac4c 07 Feb 2024 U2 — Yes Details →
v2.19.1-0.20240129194808-ed6db00bdde2 29 Jan 2024 U2 — Yes Details →
v2.19.1-0.20240129054951-832df2244e7f 29 Jan 2024 U2 — Yes Details →
v2.19.1-0.20240125110951-aa7f619fd2c0 25 Jan 2024 U2 — Yes Details →
v2.19.1-0.20240122172342-07fb763786f6 22 Jan 2024 U2 — Yes Details →
v2.18.1-0.20240118044103-23b5cc172c6e 18 Jan 2024 U2 — Yes Details →
v2.19.0 18 Jan 2024 U2 — Yes Details →
v2.18.1-0.20240117182905-4ad91f8a3c07 17 Jan 2024 U2 — Yes Details →
v2.18.1-0.20240116182756-d25c1c882229 16 Jan 2024 U2 — Yes Details →

The newest 120 of 186 versions Vulert tracks. Severity counts are the vulnerabilities recorded against that exact release.

02 Disclosure history

How often vulnerabilities are recorded

  • 2023 2

Counted by the year Vulert recorded each vulnerability — the same date the table below shows as disclosed. 0 of the 2 were recorded in the last 12 months.

03 Vulnerabilities

Recorded vulnerabilities for github.com/hamba/avro/v2

The 2 most severe of 2 vulnerabilities recorded for this package

Search all 2 in the database →
Vulnerability Severity Fixed version ↓ Disclosed ↓
CVE-2023-37475: Unrestricted memory consumption in github.com/hamba/avro N/A unrated 2.13.0 25 Jul 2023
CVE-2023-37475: Unrestricted Memory Consumption in github.com/hamba/avro N/A unrated 2.13.0 25 Jul 2023

Vulnerability wrong, a fix missing, or a package we should cover? Report it and we will fix the record. Report Vulnerability Provide Feedback

Updated: 23/Oct/2026 · Vulnerabilities in our DB: 524315

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →

Questions

About github.com/hamba/avro/v2

Is github.com/hamba/avro/v2 safe to use?

Vulert records 2 vulnerabilities for github.com/hamba/avro/v2 in Go: 0 critical, 0 high, 0 medium and 0 low, plus 2 not yet rated. Every one of them has a published fix, so the practical answer is to run a supported release and keep it patched.

What is github.com/hamba/avro/v2's Vulert package health score?

Vulert scores github.com/hamba/avro/v2 76/100, which reads as in good shape. The score weighs the vulnerability record (40), maintenance and release cadence (25), adoption from dependents and stars (20) and community signals such as the OpenSSF scorecard and forks (15).

Is the latest version of github.com/hamba/avro/v2 affected?

Yes. v2.31.0, the version you would install today, has 2 known vulnerabilities, and every one of them has a published fix. Upgrade to the version listed for each.

Which version of github.com/hamba/avro/v2 should I use?

v2.31.0 is the version Vulert recommends for the affected releases. The version table above lists every release with the vulnerabilities recorded against it, so you can confirm the range you actually run.

How many vulnerabilities does github.com/hamba/avro/v2 have?

2 vulnerabilities are recorded for github.com/hamba/avro/v2 in the Go ecosystem: 0 critical, 0 high, 0 medium and 0 low, plus 2 not yet rated. The ledger on this page lists the same counts next to the date of the most recent disclosure.

How often are new github.com/hamba/avro/v2 vulnerabilities disclosed?

0 vulnerabilities were recorded for github.com/hamba/avro/v2 in the last 12 months, and the oldest entry in this database dates to 25 Jul 2023. Recency matters more than a lifetime total: it shows how actively new issues are being disclosed for the package you are considering.

Which versions of github.com/hamba/avro/v2 are affected?

Each vulnerability on this page lists the affected version range and the fixed version to move to. Open the vulnerability for the version you actually run — fixes are specific to a release line, not to the package as a whole.

How do I monitor github.com/hamba/avro/v2 for upcoming vulnerabilities?

Upload the manifest or SBOM for your application at vulert.com/scanner and Vulert keeps checking the github.com/hamba/avro/v2 version you actually run against new disclosures, then alerts you when one affects it. There is no installation and no source-code access required.