CLSA-2026-1794253414

See a problem?
Import Source
https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794253414.json
JSON Data
https://api.osv.dev/v1/vulns/CLSA-2026-1794253414
Upstream
CVE (3)
Published
2026-11-09T20:43:34Z
Modified
2026-11-10T01:15:03Z
Summary
TuxCare security update for org.apache.avro (3 CVEs)
Details

TuxCare rebuilt 2 org.apache.avro packages to address 3 CVEs. Fixed in 1.11.1-tuxcare.1.

Affected packages

TuxCare:Maven / org.apache.avro:avro

Package

Name
org.apache.avro:avro
Purl
pkg:maven/org.apache.avro/avro

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.11.1
Fixed
1.11.1-tuxcare.1

Affected versions

1.*
1.11.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794253414.json"
tuxcare 
{
    "base_version": "1.11.1",
    "fixed_version": "1.11.1-tuxcare.1"
}

TuxCare:Maven / org.apache.avro:avro-compiler

Package

Name
org.apache.avro:avro-compiler
Purl
pkg:maven/org.apache.avro/avro-compiler

Affected ranges

Type
ECOSYSTEM
Events
Introduced
1.11.1
Fixed
1.11.1-tuxcare.1

Affected versions

1.*
1.11.1

Database specific

source 
"https://github.com/cloudlinux/tuxcare-osv/tree/main/data/els_lang/maven/CLSA-2026-1794253414.json"
tuxcare 
{
    "base_version": "1.11.1",
    "fixed_version": "1.11.1-tuxcare.1"
}