Repository navigation
Security: ConduitIO/conduit-commons
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
-
Avro decoding of nested unions can drop map keys or values without an errorGHSA-2cr9-8q6v-733r published
Oct 20, 2026 by devarismeroxaModerate -
Avro Serde.Marshal modifies its input, so a shared value can be written as its union wrapperGHSA-fhm8-v27h-q65j published
Oct 20, 2026 by devarismeroxaLow -
Avro encoding can use another schema's encoder for named types, silently writing wrong dataGHSA-hx9g-59x7-9h4x published
Oct 20, 2026 by devarismeroxaModerate -
Schema serde cache keyed on a 64-bit Rabin fingerprint lets a hostile schema be decoded in place of anotherGHSA-94xc-rjcp-83cr published
Oct 20, 2026 by devarismeroxaModerate
Learn more about advisories related to ConduitIO/conduit-commons in the GitHub Advisory Database