Vulnerabilities

TI-2026-68933 CVE-2026-106453 · GHSA-6cx8-rjf8-pr8g

LZ4 Java decompressor allocates memory from untrusted length header

LOW 30

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00372 Published 2026-10-06 Partial fix · 1.11.2 CWE-789

TI-2026-68932 CVE-2026-106452 · GHSA-4v53-57pg-c464

LOW 30

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00454 Published 2026-10-06 Partial fix · 1.11.2 CWE-789

TI-2026-68931 CVE-2026-106451 · GHSA-mcr4-qmvw-px4g

LOW 33

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 4.0HIGH 7.3 Local Low privileges No interaction EPSS 0.00108 Published 2026-10-06 Partial fix · 1.11.4 CWE-367

TI-2026-68930 CVE-2026-106450 · GHSA-gm45-99xc-r7wv

LOW 30

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.00454 Published 2026-10-06 Partial fix · 1.11.4 CWE-770

TI-2026-68929 CVE-2026-106449 · GHSA-343h-94h5-c4wr

LOW 18

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1LOW 3.7 Network No auth No interaction EPSS 0.00423 Published 2026-10-06 Partial fix · 1.11.4 CWE-674

TI-2026-42755 CVE-2026-59949 · GHSA-xx22-p4ch-683r

LOW 29

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00466 Published 2026-08-18 Partial fix · 1.11.1 CWE-476

TI-2025-40977 CVE-2025-66566 · GHSA-cmp6-m4wj-q63q

MEDIUM 43

yawkat LZ4 Java provides LZ4 compression for Java.

CVSS 4.0HIGH 8.2 Network No auth No interaction EPSS 0.00649 Published 2025-12-05 Partial fix · 1.10.1 CWE-201