TI-2025-35901 CVE-2025-58058 · GHSA-jc7w-c686-c4v9
github.com/ulikunitz/xz leaks memory when decoding a corrupted multiple LZMA archives
Priority MEDIUM 57
xz is a pure golang package for reading and writing xz-compressed files.
No ulikunitz vulnerabilities are listed in CISA KEV.
1 record
xz is a pure golang package for reading and writing xz-compressed files.