yawkat

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

yawkat records in CISA KEV

No yawkat vulnerabilities are listed in CISA KEV.

Records

7 records

TI-2025-40977 CVE-2025-66566 · GHSA-cmp6-m4wj-q63q

yawkat LZ4 Java has a possible information leak in Java safe decompressor

MEDIUM 43

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00649 Published 2025-12-05 Partial fix · 1.10.1 CWE-201

TI-2026-68931 CVE-2026-106451 · GHSA-mcr4-qmvw-px4g

LZ4 Java native library extraction allows local file replacement

LOW 33

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00108 Published 2026-10-06 Partial fix · 1.11.4 CWE-367

TI-2026-68933 CVE-2026-106453 · GHSA-6cx8-rjf8-pr8g

LZ4 Java decompressor allocates memory from untrusted length header

LOW 30

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00372 Published 2026-10-06 Partial fix · 1.11.2 CWE-789

TI-2026-68932 CVE-2026-106452 · GHSA-4v53-57pg-c464

Excessive memory allocation in LZ4 Java stream reader

LOW 30

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00454 Published 2026-10-06 Partial fix · 1.11.2 CWE-789

TI-2026-68930 CVE-2026-106450 · GHSA-gm45-99xc-r7wv

LZ4 Java LZ4FrameInputStream allocates memory without limits

LOW 30

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00454 Published 2026-10-06 Partial fix · 1.11.4 CWE-770

TI-2026-42755 CVE-2026-59949 · GHSA-xx22-p4ch-683r

NULL pointer dereference in yawkat lz4-java

LOW 29

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00466 Published 2026-08-18 Partial fix · 1.11.1 CWE-476

TI-2026-68929 CVE-2026-106449 · GHSA-343h-94h5-c4wr

Uncontrolled recursion in yawkat LZ4 Java LZ4BlockInputStream

LOW 18

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00423 Published 2026-10-06 Partial fix · 1.11.4 CWE-674

Open these records in search →