[ Vendor · 8 CVEs ]
luben
CVEs affecting luben published in the last 30 days, plus any luben CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-90852 | 15 Sep 2026 | CVSS 7.3 | luben zstd-jniA vulnerability has been found in luben zstd-jni up to 1.5.7-13. This vulnerability affects the function ZstdCompressCtx.loadDict of the file… | |
| CVE-2026-90560 | 12 Sep 2026 | CVSS 8.2 | luben zstd-jnizstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerability in the ZstdDictDecompress constructor because offset and length… | |
| CVE-2026-89045 | 10 Sep 2026 | CVSS 4.0 | luben zstd-jnizstd-jni versions 1.4.8-4 through 1.5.7-13 fail to validate negative length parameters in ZstdInputStreamNoFinalizer.read(), allowing attackers to… | |
| CVE-2026-87877 | 9 Sep 2026 | CVSS 7.7 | luben zstd-jnizstd-jni versions before 1.5.7-14 fail to validate closed state in setDict, setLongMax, setLevel and setRefMultipleDDicts methods of stream classes… | |
| CVE-2026-87824 | 9 Sep 2026 | CVSS 7.5 | luben zstd-jnizstd-jni before 1.5.7-14 fails to validate the samples buffer capacity in Zstd.trainFromBufferDirect, allowing attackers to read past buffer… | |
| CVE-2026-87825 | 9 Sep 2026 | CVSS 7.7 | luben zstd-jnizstd-jni before 1.5.7-14 contains a use-after-free vulnerability where streams and contexts hold a dictionary's shared lock only during the load… | |
| CVE-2026-87823 | 9 Sep 2026 | CVSS 8.2 | luben zstd-jnizstd-jni before 1.5.7-14 performs 32-bit signed bounds checks on three direct-ByteBuffer frame-size native methods, allowing out-of-bounds memory… | |
| CVE-2026-87795 | 9 Sep 2026 | CVSS 8.2 | luben zstd-jnizstd-jni versions before 1.5.7-14 fail to validate offset and length parameters in the ZstdDictCompress constructor, allowing out-of-bounds memory… |