{"api_version":"v1","generated_at":"2026-10-08T20:40:00+00:00","product":{"cve_count":2,"evidence_gap_note":"Official registry publication history is linked, but a publisher support or retirement boundary has not been established.","id":"security:cve-iskorotkov-avro-d793e0a3c3a2","lifecycle_state":"evidence_gap","linked_lifecycle_url":"https://lifecycle.blacktree.nl/libraries/npm/avro","name":"avro","next_cursor":null,"observations":[{"affected":"avro: < 2.33.0","affected_versions_present":true,"cve_id":"CVE-2026-46385","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46385","fixed":"RHSA-2026:48151: Cryostat 4 on RHEL 9","last_modified":"2026-09-09T12:05:07.261Z","patch_url":"https://github.com/iskorotkov/avro/security/advisories/GHSA-w8j3-pq8g-8m7w","primary_source":"","published":"2026-05-29T19:58:59.667Z"},{"affected":"avro: < 2.33.0","affected_versions_present":true,"cve_id":"CVE-2026-46384","cve_url":"https://cve.blacktree.nl/cve/CVE-2026-46384","fixed":"RHSA-2026:48151: Cryostat 4 on RHEL 9","last_modified":"2026-09-09T12:04:43.443Z","patch_url":"https://github.com/iskorotkov/avro/security/advisories/GHSA-mc57-h6j3-3hmv","primary_source":"","published":"2026-05-29T19:58:21.535Z"}],"source_generated_at":"2026-10-08T06:18:52.353Z","vendor":"iskorotkov"}}