CLEANSTART-2026-UD32913

See a problem?

Import Source

https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UD32913.json

JSON Data

https://api.osv.dev/v1/vulns/CLEANSTART-2026-UD32913

Upstream

CVE-2025-33042

Published

2026-10-30T09:33:11Z

Modified

2026-10-31T01:02:25Z

Severity

7.3 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L CVSS Calculator

Summary

Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas

Details

Security vulnerability affects the spark-sc213-jdk17-py312 package. Improper Control of Generation of Code ('Code Injection') vulnerability in Apache Avro Java SDK when generating specific records from untrusted Avro schemas.

References

Affected packages

CleanStart / spark-sc213-jdk17-py312

Package

Name: spark-sc213-jdk17-py312
Purl: pkg:apk/cleanstart/spark-sc213-jdk17-py312

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0 Unknown introduced version / All previous versions are affected

Fixed

4.1.3-r4

Database specific

source

"https://github.com/cleanstart-dev/cleanstart-security-advisories/blob/main/advisories/2026/CLEANSTART-2026-UD32913.json"