avro has 1 known vulnerabilities on the latest version (1.12.1). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of avro?

The latest version of avro is 1.12.1, released 2025-10-15.

Does avro have known vulnerabilities?

Yes. avro has 1 known vulnerabilities. See depscope.dev/pkg/pypi/avro for details.

No, avro is actively maintained. Latest release: 1.12.1 (2025-10-15).

What are alternatives to avro?

Popular alternatives to avro in PyPI include: certifi, charset-normalizer, charset_normalizer, cryptography, six.

What license does avro use?

avro is licensed under Apache License 2.0.

avro

pypiv1.12.1

Avro is a serialization and RPC framework.

License Apache License 2.0permissive35 versions1 maintainers2 deps3,721,807 weekly dl

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

10/25

maintenance

17/20

popularity

20/25

security

12/15

maturity

2/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2022-36124	It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.	—

Quality signals

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (2)

python-snappy;zstandard;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/avro