68878 matches found
PT-2026-117740
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-117794
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
PT-2026-117730
Security vulnerability affects the apache-nifi package. yawkat LZ4 Java provides LZ4 compression for Java...
Linux Distros Unpatched Vulnerability : CVE-2026-108106
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large...
Linux Distros Unpatched Vulnerability : CVE-2026-108104
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when...
PT-2026-117909
Security vulnerability affects the apache-nifi package. The Java Key Vault Keys library in the Azure SDK for Java contains an issue in the local cryptographic verification path where authentication tag comparison was implemented incorrectly...
Linux Distros Unpatched Vulnerability : CVE-2026-102554
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker t...
PT-2026-117846
Security vulnerability affects the apache-nifi package. ZDRES-232: resolveProxyClass Not Overridden - acceptMatchers Filter Bypass via java...
CVE-2026-108106
A flaw was found in snappy-java. A remote attacker can exploit this unbounded memory allocation vulnerability by providing crafted compressed input with an excessively large declared uncompressed size during decompression. Successful exploitation allows the attacker to exhaust available system...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23663 more potentially affected by CVE-2026-108104 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.8)
org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-108104 Source advisory: SNYK:JAVA-ORGXERIALSNAPPY-20825056...
Double Free
Overview Affected versions of this package are vulnerable to Double Free via SnappyFramedInputStream in src/main/java/org/xerial/snappy/SnappyFramedInputStream.java. An attacker can make two SnappyFramedInputStream instances share the same backing array by supplying framed data with a large...
ae.teletronics.nlp:entityextraction (1.3), ae.teletronics.nlp:w2vec (1.0) +23663 more potentially affected by CVE-2026-108106 via org.xerial.snappy:snappy-java (>=1.0.1-rc3, <=1.1.10.8)
org.xerial.snappy:snappy-java MAVEN version =1.0.1-rc3, =0.25-rc1, =0.25-rc1, =0.25, =0.25, =0.25, =0.25, =1.0.1, =1.0.6, =1.0.6, =1.1, =1.1.1, =1.2, =1.2, =1.2.10 and more Source cves: CVE-2026-108106 Source advisory: SNYK:JAVA-ORGXERIALSNAPPY-20825055...
Memory Allocation with Excessive Size Value
Overview Affected versions of this package are vulnerable to Memory Allocation with Excessive Size Value through the Snappy.uncompressedLength and decompression paths in Snappy.java and SnappyFramedInputStream. An attacker can exhaust JVM memory by supplying a crafted compressed payload that...
UBUNTU-CVE-2026-102554
Allocation of resources without limits or throttling CWE-770 during Java object deserialization in Google Guava versions 4.0 through 33.7.1 allows an attacker to cause a Denial of Service via OutOfMemoryError. When deserializing CompactHashMap, CompactHashSet, or MapMakerInternalMap instances,...
Duplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q233-g92q-qxp6. This link is maintained to preserve external references. Original Description Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to...
GHSA-94X4-5G3F-JJXP Duplicate Advisory: snappy-java: Unbounded memory allocation from attacker-declared uncompressed lengtha
Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-q233-g92q-qxp6. This link is maintained to preserve external references. Original Description Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to...
DEBIAN-CVE-2026-108104
Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...
CVE-2026-108104
Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled buffers twice when replacement allocation fails. Attackers can supply framed data with a large declared chunk length to trigger OutOfMemoryError, causing shared...
CVE-2026-108106
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...
DEBIAN-CVE-2026-108106
Xerial snappy-java before 1.1.10.9 contains an unbounded memory allocation vulnerability that allows attackers to exhaust JVM memory by declaring a large uncompressed length in compressed input. Attackers can supply a few crafted bytes to Snappy.uncompress, uncompressString, SnappyInputStream or...