Known vulnerabilities in lz4-java

Vendor: jpountz (Adrien Grand)
Software: lz4-java
Software CPE: cpe:2.3:a:jpountz:lz4-java:*:*:*:*:*:*:*:*
Website: https://github.com/jpountz/
Total vulnerabilities: 9
Public exploits: 0
Known exploited (KEV): 0

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting lz4-java lz4-java is affected by 9 known vulnerabilities: 5 medium, 4 low Critical High Medium Low

Vulnerabilities (9)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU153029 - Allocation of Resources Without Limits or Throttling
CVE-2026-106450		 CWE-770 Medium
No
No
 1.11.4 30.09.2026 SB20260930113
#VU153028 - Uncontrolled Recursion
CVE-2026-106449		 CWE-674 Low
No
No
 1.11.4 30.09.2026 SB20260930113
#VU153027 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2026-106451		 CWE-367 Low
No
No
 1.11.4 30.09.2026 SB20260930113
#VU141232 - Uncontrolled Memory Allocation
CVE-2026-106453		 CWE-789 Medium
No
No
 1.11.2 07.08.2026 SB2026080725
#VU141231 - Uncontrolled Memory Allocation
CVE-2026-106452		 CWE-789 Medium
No
No
 1.11.2 07.08.2026 SB2026080725
#VU137031 - NULL Pointer Dereference
CVE-2026-59949		 CWE-476 Low
No
No
 1.11.1 07.07.2026 SB2026070772
SB2026091420
SB20260925194
and 2 more
#VU137032 - Out-of-bounds read
 CWE-125 Low
No
No
 1.11.1 07.07.2026 SB2026070772
#VU121007 - Exposure of sensitive information to an unauthorized actor
CVE-2025-66566		 CWE-200 Medium
No
No
 1.10.1 07.01.2026 SB2026010702
SB2026010705
SB2026010706
and 28 more
#VU121006 - Out-of-bounds read
CVE-2025-12183		 CWE-125 Medium
No
No
 1.8.1 07.01.2026 SB2026010701
SB2026010705
SB2026010706
and 14 more