grype-0.109.1-1.1 on GA media (moderate)

grype-0.109.1-1.1 on GA media Announcement ID: openSUSE-SU-2026:10317-1 Rating: moderate Cross-References: CVE-2025-12183 Affected Products: openSUSE Tumbleweed An update that solves one vulnerability can now be installed. Description: These are all security issues fixed in the grype-0.109.1-1.1...

Security Bulletin: IBM Enterprise Build of Quarkus is affected by two vulnerabilities due to LZ4-java

Summary LZ4-java is a data compression library used by Netty and Apache Kafka. When LZ4-java is used to decompress untrusted data, remote attackers could cause Denial of Service and/or access sensitive data by sending crafted malicious input. Vulnerability Details CVEID:CVE-2025-12183 DESCRIPTION...

CVE-2025-12183

creationtimestamp| type| source ---|---|--- 2025-11-28 17:33:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3m6pg5p6wkj2w 2025-12-01 17:26:41+00:00| seen| https://seclists.org/oss-sec/2025/q4/222 2025-12-01 18:55:06+00:00| seen|...

CVE-2025-12183 org.lz4:lz4-java - Out-of-Bounds Memory Access

Out-of-bounds memory operations in org.lz4:lz4-java 1.8.0 and earlier allow remote attackers to cause denial of service and read adjacent memory via untrusted compressed input...