{
  "aliases": [
    "CVE-2021-43045",
    "GHSA-868x-rg4c-cjqg"
  ],
  "summary": "Allocation of Resources Without Limits or Throttling in Apache Avro\nA vulnerability in the .NET SDK of Apache Avro allows an attacker to allocate excessive resources, potentially causing a denial-of-service attack. This issue affects .NET applications using Apache Avro and prior versions. Users should update to which addresses this issue.",
  "affected_packages": [
    {
      "package": {
        "type": "nuget",
        "namespace": null,
        "name": "Apache.Avro",
        "version": null,
        "qualifiers": null,
        "subpath": null
      },
      "affected_version_range": "vers:nuget/<1.11.0",
      "fixed_version": "1.11.0"
    }
  ],
  "references": [
    {
      "reference_id": "CVE-2021-43045",
      "url": "https://nvd.nist.gov/vuln/detail/CVE-2021-43045",
      "severities": []
    },
    {
      "reference_id": "GHSA-868x-rg4c-cjqg",
      "url": "https://github.com/advisories/GHSA-868x-rg4c-cjqg",
      "severities": []
    }
  ],
  "date_published": "2022-01-08T00:00:00+00:00"
}