VulnSea

yawkat has 5 CVEs on record. 5 were published in the last 90 days. The busiest recent month was October 2026 with 5. The median CVSS is 5.3 (medium). None have a confirmed exploitation report.

CVEs per month

Last 12 months, by publish date

111201020304050607080910
Exploited share
0% vs 1% corpus
Median CVSS
5.3
Publish → KEV
—
Last 90 days
5 prev 0

Products

  • lz4-java 5
Follow yawkat:RSS feedSave a search →Embed badge ↗
5
Total CVEs
0
Critical
0
CISA KEV
0
Exploited

Worst active — by depth score

yawkat vulnerabilities

CVEs affecting yawkat, newest first. Open any entry for full detail, references, and exploit status.

5 CVEsRSS

CVE-2026-106449Low· 3.7
yesterday

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4BlockInputStream configured with stopOnEmptyBlock set to false handles each well-formed empty LZ4Block by recursively calling refill(), allowing a lon…

▾ Sunlityawkat · lz4-javavia NVD
CVE-2026-106450Medium· 5.3
yesterday

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.4, net.jpountz.lz4.LZ4FrameInputStream readHeader() allocates two new 4 MiB block buffers whenever a maximum-block-size frame header is read, and the default concatenated-f…

▾ Sunlityawkat · lz4-javavia NVD
CVE-2026-106451High· 7.3
yesterday

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. From 1.7.0 until 1.11.4, net.jpountz.util.Native.load() uses File.createTempFile to create an exclusive temporary .lck file but derives the native-library path by removing the suffix, th…

▾ Twilightyawkat · lz4-javavia NVD
CVE-2026-106452Medium· 5.3
yesterday

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, net.jpountz.lz4.LZ4BlockInputStream refill() validates that the compressedLen field in a legacy LZ4Block header is nonnegative but allocates a compressed-input buffer of…

▾ Sunlityawkat · lz4-javavia NVD
CVE-2026-106453Medium· 5.3
yesterday

yawkat LZ4 Java provides LZ4 compression for Java

yawkat LZ4 Java provides LZ4 compression for Java. Prior to 1.11.2, LZ4DecompressorWithLength uses getDecompressedLength to trust the four-byte decompressed-length header before validating the compressed input, allowing a five-byte attac…

▾ Sunlityawkat · lz4-javavia NVD
yawkat vulnerabilities (CVEs) · VulnSea