CVE-2025-33042

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.

Published Feb 15, 2026

https://github.com/advisories/GHSA-rp46-r563-jrc7

CVSS ScoreMedium

6.9

Ecosystem	Package	Version

Ecosystem	Package	Version

Vulnerabilities

CVE-2025-33042

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas. This issue affects Apache Avro Java SDK: all versions through 1.11.4 and version 1.12.0. Users are recommended to upgrade to version 1.12.1 or 1.11.5, which fix the issue.

Published Feb 15, 2026

https://github.com/advisories/GHSA-rp46-r563-jrc7

CVSS ScoreMedium

6.9


npm	@adobe/aio-cli-plugin-app	4.0.0-1
nuget	Microsoft.Experimental.Azure.Hive	0.2.0-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.1-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.10-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.11-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.12-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.2-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.3-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.7-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.8-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.9-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.3.0-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.4.0-alpha
maven	ai.grakn/grakn-dist	0.10.0
maven	ai.grakn/grakn-dist	0.11.0
maven	ai.grakn/grakn-dist	0.12.0
maven	ai.grakn/grakn-dist	0.12.1
maven	ai.grakn/grakn-dist	0.13.0
maven	ai.grakn/grakn-dist	0.14.0
maven	ai.grakn/grakn-dist	0.15.0
maven	ai.grakn/grakn-dist	0.16.0
maven	ai.grakn/grakn-dist	0.17.0
maven	ai.grakn/grakn-dist	0.7.0
maven	ai.grakn/grakn-dist	0.8.0
maven	ai.grakn/grakn-dist	0.9.0
maven	ai.grakn/grakn-dist	1.4.0
maven	ai.grakn/grakn-dist	1.4.1
maven	ai.grakn/grakn-dist	v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744
maven	ai.platon.pulsar/pulsar-master	1.13.1
maven	ai.platon.pulsar/pulsar-master	2.0.2
maven	ai.platon.pulsar/pulsar-master	3.0.10
maven	ai.platon.pulsar/pulsar-master	3.0.12
maven	ai.platon.pulsar/pulsar-master	3.0.14
maven	ai.platon.pulsar/pulsar-master	3.0.15
maven	ai.platon.pulsar/pulsar-master	3.0.7
maven	ai.platon.pulsar/pulsar-master	3.0.8
maven	ai.platon.pulsar/pulsar-master	3.0.9
pypi	atoti	0.4.0
pypi	atoti	0.4.1
pypi	atoti	0.4.2
pypi	atoti	0.4.3
pypi	atoti	0.5.0
pypi	atoti	0.5.1
pypi	atoti	0.5.2
pypi	atoti	0.5.3
pypi	atoti	0.5.4
pypi	atoti	0.5.5
pypi	atoti	0.6.0
pypi	atoti	0.6.1
pypi	atoti	0.6.2

Ecosystem	Package	Version


npm	@adobe/aio-cli-plugin-app	4.0.0-1
nuget	Microsoft.Experimental.Azure.Hive	0.2.0-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.1-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.10-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.11-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.12-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.2-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.3-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.7-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.8-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.2.9-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.3.0-alpha
nuget	Microsoft.Experimental.Azure.Hive	0.4.0-alpha
maven	ai.grakn/grakn-dist	0.10.0
maven	ai.grakn/grakn-dist	0.11.0
maven	ai.grakn/grakn-dist	0.12.0
maven	ai.grakn/grakn-dist	0.12.1
maven	ai.grakn/grakn-dist	0.13.0
maven	ai.grakn/grakn-dist	0.14.0
maven	ai.grakn/grakn-dist	0.15.0
maven	ai.grakn/grakn-dist	0.16.0
maven	ai.grakn/grakn-dist	0.17.0
maven	ai.grakn/grakn-dist	0.7.0
maven	ai.grakn/grakn-dist	0.8.0
maven	ai.grakn/grakn-dist	0.9.0
maven	ai.grakn/grakn-dist	1.4.0
maven	ai.grakn/grakn-dist	1.4.1
maven	ai.grakn/grakn-dist	v1.1.0-226-g847ecff2d8e26f249422247d7665fe15f07b1744
maven	ai.platon.pulsar/pulsar-master	1.13.1
maven	ai.platon.pulsar/pulsar-master	2.0.2
maven	ai.platon.pulsar/pulsar-master	3.0.10
maven	ai.platon.pulsar/pulsar-master	3.0.12
maven	ai.platon.pulsar/pulsar-master	3.0.14
maven	ai.platon.pulsar/pulsar-master	3.0.15
maven	ai.platon.pulsar/pulsar-master	3.0.7
maven	ai.platon.pulsar/pulsar-master	3.0.8
maven	ai.platon.pulsar/pulsar-master	3.0.9
pypi	atoti	0.4.0
pypi	atoti	0.4.1
pypi	atoti	0.4.2
pypi	atoti	0.4.3
pypi	atoti	0.5.0
pypi	atoti	0.5.1
pypi	atoti	0.5.2
pypi	atoti	0.5.3
pypi	atoti	0.5.4
pypi	atoti	0.5.5
pypi	atoti	0.6.0
pypi	atoti	0.6.1
pypi	atoti	0.6.2

Find vulnerabilities. Fix fast with AI.

CVE-2025-33042

CVE-2025-33042