7.9 High
AI Score
Confidence
Low
0.002 Low
EPSS
Percentile
62.0%
LZ4 bindings use a deprecated C API that is vulnerable to memory corruption, which could lead to arbitrary code execution if called with untrusted user input.
github.com/cloudflare/golz4/commit/199f5f7878062ca17a98e079f2dbe1205e2ed898
github.com/cloudflare/golz4/issues/5
pkg.go.dev/vuln/GO-2020-0022