CVE-2026-42154

CVE-2026-42154 CVE-2026-42154 — Prometheus Remote Read Snappy DoS...

CLEANSTART-2026-FN33770 Xerial snappy-java from 1

Security vulnerability affects the solr package. Xerial snappy-java from 1...

CLEANSTART-2026-OU24429 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-BS90242 Xerial snappy-java before 1

Security vulnerability affects the solr package. Xerial snappy-java before 1...

CLEANSTART-2026-DF81862 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-ZO24294 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CVE-2026-78066

Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...

CVE-2026-78066

Apache bRPC (versions

EUVD-2026-107185

Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...

CVE-2026-78066 Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes

Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...

PT-2026-120543

Resource exhaustion in Apache bRPC version 1.18.0 on all platforms: multiple parsers that accept wire-controlled input bound no limit on the sizes declared by the client or on decompressed output, which attackers can use to drive disproportionate memory use and crash the process. Root Cause: 1 Th...

Astra Linux – Vulnerability in snappy-java

Snappy-Java is a Java port of the snappy, a fast C++ compressor/decompressor developed by Google. It was found that the SnappyInputStream is vulnerable to Denial of Service DoS attacks when decompressing data with a too large chunk size. Due to a lack of a upper bound check on the chunk length, a...

Security Bulletin: Multiple vulnerabilities in IBM Tivoli Network Manager IP Edition

Summary Multiple vulnerabilities were addressed in IBM Tivoli Network Manager IP Edition 4.2.0.25 IF1 Vulnerability Details CVEID:CVE-2026-108104 DESCRIPTION: Xerial snappy-java from 1.1.7.4 before 1.1.10.10 contains a double release vulnerability in SnappyFramedInputStream that returns pooled...

CLEANSTART-2026-MH58992 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-RU43979 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-GD87503 snappy-java through 1

Security vulnerability affects the elasticsearch package. snappy-java through 1...

CLEANSTART-2026-VP40557 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-XV24797 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CLEANSTART-2026-UM59263 snappy-java through 1

Security vulnerability affects the solr package. snappy-java through 1...

CVE-2026-108104

A flaw was found in snappy-java. A remote attacker can cause information disclosure or data corruption by supplying framed data with an excessively large chunk length. This input triggers an out-of-memory condition during buffer reallocation in SnappyFramedInputStream, causing pooled memory buffe...