avro has 1 known vulnerabilities on the latest version (1.12.2). DepScope rates its health at 60/100 (moderate risk).

What is the latest version of avro?

The latest version of avro is 1.12.2, released 2026-08-17.

Does avro have known vulnerabilities?

Yes. avro has 1 known vulnerabilities. See depscope.dev/pkg/pypi/avro for details.

No, avro is actively maintained. Latest release: 1.12.2 (2026-08-17).

What are alternatives to avro?

Popular alternatives to avro in PyPI include: setuptools, pyyaml, pycparser, click, pydantic_core.

What license does avro use?

avro is licensed under Apache-2.0.

avro

pypiv1.12.2

Avro is a serialization and RPC framework.

License Apache-2.0permissive36 versions2 deps3,406,772 weekly dl

apache/avro

/ 100

Health

update required

[email protected] has vulnerabilities — update to latest

Moderate health score (60/100) — verify manually
1 high severity vulnerabilities

Health breakdown0 – 100

25/25

maintenance

17/20

popularity

20/25

security

12/15

maturity

6/15

community

0/15

popularity_floor

Vulnerabilities

1 high

Advisories (1)

Severity	ID	Summary	Fixed in
high	CVE-2022-36124	It is possible for a Reader to consume memory beyond the allowed constraints and thus lead to out of memory on the system. This issue affects Rust applications using Apache Avro Rust SDK prior to 0.14.0 (previously known as avro-rs). Users should update to apache-avro version 0.14.0 which addresses this issue.	—

Quality signals

Publish security

API token

Health History

Dependency Tree

License Audit

Dependencies (2)

python-snappy;zstandard;

API access

Get this data programmatically — free, no authentication.

curl https://depscope.dev/api/check/pypi/avro