Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: ning Clear all filters
TI-2026-76646 CVE-2026-109395

Out-of-bounds memory access in Ning compress-lzf LZF decoder

Priority MEDIUM 45

Ning compress-lzf before 1.2.0 contains an out-of-bounds memory access vulnerability in the sun.misc.Unsafe based UnsafeChunkDecoder that fails to validate back-references and literal runs.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00524 Published 2026-10-20 Fixed in 1.2.0 CWE-125