Vulnerabilities

TI-2026-48978 CVE-2026-69702 · GHSA-ppxj-mvph-j9w4

SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM

LOW 32

SnailJob 1.7.0 contains a denial of service vulnerability in the FuryUtil.deserialize helper that allows authenticated attackers to crash the server by supplying a crafted Zstandard-compressed payload with an inflated fr…

CVSS 4.0HIGH 7.1 Network Low privileges No interaction EPSS 0.00548 Published 2026-08-04 No fix listed CWE-789

TI-2025-13923 CVE-2025-15246 · GHSA-w944-w7q2-5fv6

aizuda snail-job API FurySerializer.deserialize deserialization

MEDIUM 57

A vulnerability was determined in aizuda snail-job up to 1.7.0 on macOS.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00288 Published 2025-12-30 No fix listed CWE-20

TI-2025-13407 CVE-2025-14674 · GHSA-3f8c-8h8v-p54h

aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection

LOW 30

A vulnerability was found in aizuda snail-job up to 1.6.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00329 Published 2025-12-14 Fixed in 1.7.0-beta1 CWE-707

TI-2025-02288 CVE-2025-2622 · GHSA-4m5h-5v4q-4xgq

aizuda snail-job Workflow-Task Management Module check-node-expression getRuntime deserialization

MEDIUM 57

A vulnerability was found in aizuda snail-job 1.4.0.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00745 Published 2025-03-22 No fix listed CWE-20

Vulnerabilities

Filters

SnailJob 1.7.0 Denial of Service via FuryUtil.deserialize OOM

aizuda snail-job API FurySerializer.deserialize deserialization

aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection

aizuda snail-job Workflow-Task Management Module check-node-expression getRuntime deserialization