CLEANSTART-2026-FH00186 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the wildfly package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-KX25709 zstd-jni versions before 1

Security vulnerability affects the wildfly package. zstd-jni versions before 1...

CLEANSTART-2026-CC37311 zstd-jni before 1

Security vulnerability affects the wildfly package. zstd-jni before 1...

Security Bulletin:Multiple vulnerabilities in zstd-jni may affect IBM Infosphere Change Data Capture (CVE-2026-87795, CVE-2026-87823, CVE-2026-87824, CVE-2026-87825, CVE-2026-87877)

Summary Multiple security vulnerabilities have been identified in zstd-jni, JNI bindings for Zstd native library. zstd-jni is used by IBM Infosphere Change Data Capture. IBM has addressed these vulnerabilities. Refer to the "Remediation/Fixes" section below for remediation details. Vulnerability...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue in zstd-jni (CVE-2026-90852)

Summary Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to a use after free issue, due to a flaw in the function ZstdCompressCtx.loadDict of the file ZstdCompressCtx.java of the component Dictionary Sharing. in zstd-jni. Zstd-jni is used in our Speech microservices. This...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to multiple issues in zstd-jni.

Summary IBM Watson Speech Services Cartridge is vulnerable to multiple issues in zstd-jni. Zstd-jni is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni...

Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read and Infinite Loop condition in zstd-jni (CVE-2026-89045, CVE-2026-89046, CVE-2026-90560)

Summary IBM Watson Speech Services Cartridge is vulnerable to an Out-of-bounds Read and Infinite Loop condition in zstd-jni. Zstd-jni is used in our Speech microservices. These vulnerabilities have been addressed. Please read the details for remediation below. Vulnerability Details...

Security Bulletin: IBM App Connect Enterprise is vulnerable to multiple vulnerabilities due to zstd-jni.

Summary IBM App Connect Enterprise Kafka nodes are vulnerable to multiple vulnerabilities due to zstd-jni. Vulnerability Details CVEID:CVE-2026-87795 DESCRIPTION: zstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing...

CVE-2026-98079

A flaw was found in the Linux kernel's Btrfs file system. A local user could trigger a Denial of Service DoS when performing write operations on a file system using Zstandard zstd compression. Due to a synchronization timing issue during memory allocation, a write task can miss a wake-up...

CLEANSTART-2026-ZO58617 zstd-jni versions before 1

Security vulnerability affects the trino package. zstd-jni versions before 1...

CLEANSTART-2026-VB49028 zstd-jni before 1

Security vulnerability affects the trino package. zstd-jni before 1...

CLEANSTART-2026-WG76830 vulnerability has been found in luben zstd-jni up to 1

Security vulnerability affects the trino package. A vulnerability has been found in luben zstd-jni up to 1...

CLEANSTART-2026-VU34498 zstd-jni before 1

Security vulnerability affects the trino package. zstd-jni before 1...

CLEANSTART-2026-QC84579 zstd-jni before 1

Security vulnerability affects the trino package. zstd-jni before 1...

CLEANSTART-2026-PB88860 zstd-jni versions 1

Security vulnerability affects the trino package. zstd-jni versions 1...

CLEANSTART-2026-JW02170 zstd-jni versions 1

Security vulnerability affects the trino package. zstd-jni versions 1...

CLEANSTART-2026-BW94904 zstd-jni versions before 1

Security vulnerability affects the trino package. zstd-jni versions before 1...

aerovault (>=0.6.0, <=0.6.5), aetheric-core (>=0.1.0-alpha, <=0.1.2-alpha) +513 more potentially affected by unknown CVE via zstd-safe (>=7.2.4, <=7.3.0)

zstd-safe CARGO version =7.2.4, =0.6.0, =0.1.0-alpha, =0.1.2, =0.45.0, =0.0.6, =0.0.6, =0.1.0, =0.1.36, =0.1.25, =0.3.0, =0.1.0, =0.1.0, =0.6.1 - antecedent-io 2.0.0 and more Source cves: unknown CVE Source advisory: OSV:RUSTSEC-2026-0398...

RUSTSEC-2026-0401 Out-of-bounds read in `train_from_buffer` when sample sizes overflow

ZDICTtrainFromBuffer is never told the length of the samples buffer, so trainfrombuffer checked that the sample sizes add up to it. With overflow checks off, as in release builds, that sum wrapped around: sizes totalling 2^64 plus the buffer length passed the check, and the trainer read past the...

aerovault (>=0.6.0, <=0.6.5), aetheric-core (>=0.1.0-alpha, <=0.1.2-alpha) +508 more potentially affected by unknown CVE via zstd (0.13.3)

zstd CARGO version 0.13.3 is affected by a known vulnerability. The following packages have a transitive dependency on zstd and may be impacted: - aerovault =0.6.0, =0.1.0-alpha, =0.1.2, =0.45.0, =0.0.6, =0.0.6, =0.1.0, =0.1.36, =0.1.25, =0.3.0, =0.1.0, =0.1.0, =0.6.1 - antecedent-io 2.0.0 and mo...