https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 03:00:54 +0000 https://vulnerability.circl.lu/vuln/ghsa-vqf4-7m7x-wgfc <p><strong>Affected:</strong> Maven: at.yawk.lz4:lz4-java, Maven: org.lz4:lz4-java, Maven: org.lz4:lz4-pure-java, Maven: net.jpountz.lz4:lz4</p> <p>Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.</p> <p>This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived: https://github.com/lz4/lz4-java, and Sonatype has added a redirect from org.lz4:lz4-java:1.8.1 to the new group ID.</p> <p><strong>Affected:</strong> Maven: at.yawk.lz4:lz4-java, Maven: org.lz4:lz4-java, Maven: org.lz4:lz4-pure-java, Maven: net.jpountz.lz4:lz4</p> <p>Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input.</p> <p>This is fixed in a forked release: at.yawk.lz4:lz4-java version 1.8.1. The original project has been archived: https://github.com/lz4/lz4-java, and Sonatype has added a redirect from org.lz4:lz4-java:1.8.1 to the new group ID.</p> https://vulnerability.circl.lu/vuln/ghsa-vqf4-7m7x-wgfc